Warning: Critical vulnerability in OpenClaw allows 1‑click remote code execution when processing attacker‑controlled content, Patch Immediately!

A security advisory discloses CVE‑2026‑25253 in OpenClaw (Clawdbot/Moltbot), rated CVSS 8.8, which permits remote code execution when the bot renders attacker-controlled web content; successful exploitation can lead to theft of locally stored API keys, credentials, and broad system compromise. The advisory recommends urgent patching and enhanced monitoring to detect and respond to potential intrusions.