"Security researchers found a serious OpenClaw vulnerability within months of its November 2025 public launch."
DepthFirst found the flaw in late January 2026, and researchers demonstrated a one-click path to token theft and remote code execution before the issue was patched.
View Source