Security researchers at Oasis Security disclosed “ClawJacked,” a high-severity vulnerability in OpenClaw, a self-hosted AI agent platform, that let any website a user visited silently connect to and take over their locally running OpenClaw instance. Because browsers don’t block WebSocket connections to localhost, and OpenClaw exempted loopback connections from rate limiting, a malicious page’s JavaScript could brute-force the local management password at hundreds of attempts per second, register itself as a trusted device without any user prompt, and then exfiltrate data or issue commands. OpenClaw patched the core vulnerability in version 2026.2.26; reports differ on whether it was exploited in the wild before the fix.