Exploit for CVE-2026-25253

kitploit · 2026-08-25

Description

OpenClaw before v2026.1.29 exfiltrates gateway token via crafted gatewayUrl enabling 1-click RCE.

Entry point

ParametergatewayUrl · query param

Path127.0.0.1:18789

The OpenClaw gateway WebSocket endpoint can be abused via a crafted gatewayUrl parameter to force a cross-site WebSocket connection and exfiltrate/abuse the victim token, enabling arbitrary actions on the gateway.

Affected Openclaw versions

Openclaw< 2026.1.29

All known vulnerabilities by product

Openclaw

CVSS 8.8 for CVE-2026-25253

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:REQUIRED

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

CVE-2026-25253

References

https://github.com/user-attachments/assets/e6957c61-7549-4e68-831e-a05436504a3e

Exploit Details

Modified:2026-08-25 04:27

Last Seen:2026-08-26 02:12

Reporter:KitPloit

Other exploits for CVE-2026-25253

openclaw-security-monitor

2026-08-25 KitPloitKITPLOIT

leash-poc

2026-08-24 tonydziGITHUB

Gideon

2026-08-24 KitPloitKITPLOIT

Exploit for Incorrect Resource Transfer Between Spheres in Openclaw

2026-08-21 yym8538GITHUB

Exploit for Incorrect Resource Transfer Between Spheres in Openclaw

2026-04-18 KajzingerAkosGITHUB

Exploit for Incorrect Resource Transfer Between Spheres in Openclaw

2026-02-22 FrigateCaptainGITHUB

Exploit for CVE-2026-25253

2026-02-08 al4n4nGITHUB

Exploit for CVE-2026-25253

2026-02-05 adibirzuGITHUB

Exploit Code

MARKDOWN27 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-EQSTLAB-CVE-2026-25253
# CVE-2026-25253 OpenClaw 1-Click RCE

★ CVE-2026-25253 OpenClaw 1-Click Remote Code Execution PoC ★

https://github.com/user-attachments/assets/e6957c61-7549-4e68-831e-a05436504a3e

## 설명

CVE-2026-25253 : OpenClaw 인증 토큰 유출 취약점

설명: OpenClaw(일명 clawdbot 또는 Moltbot) v2026.1.29 이전 버전에서 공격자가 조작된 gatewayUrl 쿼리 문자열 값을 Control UI에 제공하여 저장된 게이트웨이 인증 토큰을 유출할 수 있습니다. 이는 검증이나 사용자 확인 없이 자동으로 WebSocket 연결을 설정합니다. 이로 인해 승인되지 않은 게이트웨이 접근과 원클릭 원격 코드 실행이 발생할 수 있습니다.

## 요구 사항

  * Docker (Windows의 Docker Desktop)
  * Python 3.x (공격자 측)



## 파일

  * `Dockerfile` — OpenClaw 취약 환경 구축
  * `templates/` — 익스플로잇에 사용되는 악성 웹 페이지
  * `config.txt` — 피해자 환경에서 사용되는 OpenClaw 설정
  * `exploit.py` — 익스플로잇 서버
  * `requirements.txt` — PoC 종속성

Exploit Code

Share

Share on social media: