Skip to content
Fencer Vulns
high 8.8

CVE-2026-25253 in the critical feed json

OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl

published 2026-02-01 9 mo ago modified 2026-06-17 4 mo ago also GHSA-g8p2-7wf7-98mq , EUVD-2026-5280

cvss
8.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
32.4%
EPSS 32.4% chance of exploitation in 30 days, percentile 98%
public exploits
0
none known

Summary

OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token value.

Patch / fix

  • npm clawdbot 2026.1.29
  • OpenClaw OpenClaw 2026.1.29

CISA SSVC

Exploitation
Proof of concept is public
Automatable
no
Technical impact
total
Assessed
9 mo ago

Exploit prediction

32.38% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • depthfirst.com https://depthfirst.com/post/1-click-rce-to-steal-your-moltbot-data-and-keys referenced PoC, tagged "exploit" by a source, unverified
  • ethiack.com https://ethiack.com/news/blog/one-click-rce-moltbot referenced PoC, tagged "exploit" by a source, unverified
  • x.com https://x.com/0xacb/status/2016913750557651228 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
GitHub 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected packages

ecosystem package affected fixed in
npm clawdbot
<2026.1.29
2026.1.29

Affected products

  • OpenClaw OpenClaw

Classification

Weakness
  • CWE-669 Incorrect Resource Transfer Between Spheres
  • CWE-668 Exposure of Resource to Wrong Sphere

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.