KajzingerAkos/CVE-2026-25253

PoC

CVE-2026-25253: One-Click RCE in OpenClaw via Auth Token Theft

view exploit source poc_in_githubauthor KajzingerAkospublished 2026-04-18catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-25253US	—	32.8% (98th)	Exploit	2026-02-01
OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.