adibirzu/openclaw-security-monitor

PoC

Proactive security monitoring for OpenClaw deployments. Detects ClawHavoc, AMOS stealer, CVE-2026-25253, memory poisoning, and supply chain attacks.

view exploit source poc_in_githubauthor adibirzupublished 2026-02-05catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-25253US	—	32.8% (98th)	Exploit	2026-02-01
OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.