ClawJacked Bug Enables Covert AI Agent Hijacking

Researchers disclosed a high-severity vulnerability in OpenClaw ("ClawJacked") where a local gateway bound to localhost can be abused by a malicious webpage to open a WebSocket to the gateway, brute-force the password (localhost is exempt from rate limiting), auto-pair as a trusted device, and achieve full remote control of the OpenClaw instance and connected nodes; users are urged to update to version 2026.2.25+ and implement governance and access controls.