al4n4n/CVE-2026-25253-research

PoC

PoC for CVE-2026-25253: one-click RCE in OpenClaw (Moltbot/Clawdbot) via token theft and cross-site WebSocket hijacking

view exploit source poc_in_githubauthor al4n4npublished 2026-02-08catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-25253US	—	32.8% (98th)	Exploit	2026-02-01
OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.