OpenClaw Vulnerability Allowed Websites to Hijack AI Agents
highnews
security
Source: SecurityWeekMarch 2, 2026
Summary
A vulnerability in OpenClaw allowed malicious websites to connect to the OpenClaw gateway (a system that manages AI agents) on localhost (a computer's own network), guess passwords through brute force attacks (trying many password combinations rapidly), and take control of AI agents. This exposed AI systems to unauthorized hijacking from untrusted websites.
Classification
Attack Type
Other
Attack SophisticationModerate
Impact (CIA+S)
confidentialityintegrity
Affected Vendors
Related Issues
Monthly digest — independent AI security research
Original source: https://www.securityweek.com/openclaw-vulnerability-allowed-malicious-websites-to-hijack-ai-agents/
First tracked: March 2, 2026 at 11:00 AM
Classified by LLM (prompt v3) · confidence: 75%