🛡️ CVE-2026-25253

The items that name it 5

• requie/AI-Red-Teaming-Guide
  repo2026-07-08

  One-click RCE via auth-token theft in the OpenClaw agent framework

• GitHub Secure Code Game
  course2026-07-04

  One-click Remote Code Execution (RCE) vulnerability that allowed attackers to steal authentication tokens via a malicious link and gain full control of the OpenClaw instance.

• Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us | Microsoft Security Blog
  article2026-06-04

  One-click RCE via WebSocket hijacking, identified in a security audit of OpenClaw shortly after its January 2026 launch

• anmolksachan/AI-ML-Free-Resources-for-Security-and-Prompt-Injection
  repo2026-05-07

  RCE in an agent skill runtime; reported as the first CVE assigned to an agentic AI system

• 1-Click RCE To Steal Your OpenClaw Data and Keys (CVE-2026-25253) | depthfirst
  writeup2026-02-01