OpenClaw's Systemic Security Collapse Gets Worse: RCE, Hijacked Agents, and 500K Sitting Ducks

Security

A UK CEO's Live OpenClaw Agent Was Listed on BreachForums for $25,000

Threat actor 'fluffyduck' sold root shell access to a CEO's machine on Feb 22, but the real product was the live OpenClaw instance containing production database credentials, Telegram tokens, and real-time conversation history stored in unencrypted Markdown files. This is the clearest example yet of AI agents becoming high-value targets rather than just software. newclawtimes.com

Analysis

Certik Study: CVE-2026-25253 Enables Full Admin Hijack via Single Malicious Link

Certik's March 31 audit found that one click on a malicious link can steal auth tokens and hand over full agent control via CVE-2026-25253 (CVSS 8.8), and 135K+ internet-exposed instances had auth disabled by default. The extension marketplace (ClawHub) is also compromised, with hundreds of skills bundling infostealers targeting saved passwords and crypto wallets. news.bitcoin.com