'A human-chosen password doesn't stand a chance': OpenClaw has yet another major security flaw — here's what we know about "ClawJacked"

Oasis security researchers find a high-severity flaw in OpenClaw AI agent Exploit allowed malicious websites to brute-force local gateway authentication and gain full control Vulnerability patched ...
SecurityWeek

OpenClaw Vulnerability Allowed Websites to Hijack AI Agents

An OpenClaw vulnerability allowed malicious websites to take over AI agents, exposing sensitive information and enabling data theft.

ClawJacked attack let malicious websites hijack OpenClaw to steal data

Security researchers have disclosed a high-severity vulnerability dubbed "ClawJacked" in the popular AI agent OpenClaw that allowed a malicious website to silently bruteforce access to a locally ...
The Hacker News

ClawJacked Flaw Lets Malicious Sites Hijack Local OpenClaw AI Agents via WebSocket

OpenClaw patches ClawJacked flaw, log poisoning bug, and multiple CVEs as 71 malicious ClawHub skills spread malware and ...
CSO Online

Your personal OpenClaw agent may also be taking orders from malicious websites

A critical OpenClaw flaw allowed malicious websites to connect to locally running agents, brute-force passwords without ...
IEEE

Hybrid Webrtc-Websocket Communication and Adaptive State Synchronization for Scalable Real-Time 3D Collaborative Whiteboard

Abstract: This paper presents a hybrid communication model that combines WebRTC for low-latency peer-topeer interactions with WebSockets for signaling, session management, and fallback support. The ...