CVE-2026-25253 – OpenClaw WebSocket Token Disclosure Vulnerability

CVE ID : CVE-2026-25253

Published : Feb. 1, 2026, 10:34 p.m. | 40 minutes ago

Description : OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token value.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…