Sploitus

CVE-2026-25253

9 known exploits for CVE-2026-25253

OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token value.

Affected products
Openclaw
Openclaw
< 2026.1.29
Fix
Available
CVSS 3.1
8.8 HIGH
EPSS
23.6% (98th percentile)
Weakness
CWE-669
NVD status
Analyzed
Published
2026-02-01
CVE-2026-25253 at NVD
Authoritative description, scoring and affected products

9 known exploits for CVE-2026-25253

Proof-of-concept code and exploit modules indexed by Sploitus

CVE-2026-25253
2026-08-26 KitPloitKITPLOIT
openclaw-security-monitor
2026-08-25 KitPloitKITPLOIT
leash-poc
2026-08-24 tonydziGITHUB
Gideon
2026-08-24 KitPloitKITPLOIT
Exploit for Incorrect Resource Transfer Between Spheres in Openclaw
2026-08-21 yym8538GITHUB
Exploit for Incorrect Resource Transfer Between Spheres in Openclaw
2026-04-18 KajzingerAkosGITHUB
Exploit for Incorrect Resource Transfer Between Spheres in Openclaw
2026-02-22 FrigateCaptainGITHUB
Exploit for CVE-2026-25253
2026-02-08 al4n4nGITHUB
Exploit for CVE-2026-25253
2026-02-05 adibirzuGITHUB