Warning: OpenClaw Gateway has a high-risk vulnerability. Please upgrade immediately to version 2026.2.25 or higher.

CoinWorld.net March 2 News: GoPlus Chinese Community issued a warning that OpenClaw Gateway currently has a high-severity vulnerability. Please upgrade immediately to version 2026.2.25 or higher, audit and revoke unnecessary credentials, API keys, and node permissions granted to Agent instances. The analysis states that OpenClaw runs through a WebSocket Gateway bound to the localhost, which serves as the core coordination layer for the Agent and is an important component of OpenClaw. The attack targets the weakness in the Gateway layer, requiring only one condition: the user visits a malicious website controlled by hackers in their browser. The complete attack chain is as follows: 1. The victim visits a malicious website controlled by the attacker in their browser; 2. JavaScript on the page initiates a WebSocket connection to the OpenClaw Gateway on the localhost; 3. Subsequently, the attack script attempts to brute-force the gateway password hundreds of times per second; 4. After successfully cracking the password, the attack script silently registers as a trusted device; 5. The attacker gains administrator-level control of the Agent.