Skip to content

CVE-2026-28363

Named by 2 kept items in this workspace.

Search every workspace for CVE-2026-28363. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • OWASP Agentic Skills Top 10 (AST10)
    repo

    ClawJacked: malicious websites can brute-force localhost WebSocket connections with no rate limiting to silently hijack local OpenClaw instances, register new devices without user prompts, and exfiltrate data through existing agent integrations.

  • OWASP Agentic Skills Top 10
    paper

    ClawJacked - malicious websites can brute-force localhost WebSocket connections with no rate limiting to silently hijack local OpenClaw instances, register new devices without user prompts, and exfiltrate data through existing agent integrations.

All cves in this workspace.