Authentication Bypass Vulnerability in OpenClaw WebSocket Client by OpenClaw

CVE-2026-32025

What is CVE-2026-32025?

OpenClaw versions prior to 2026.2.25 exhibit an authentication hardening gap within browser-origin WebSocket clients. This vulnerability can be exploited by attackers who manipulate users into visiting a malicious webpage. Once an unsuspecting user is lured, the attacker can initiate password brute-force attempts against the gateway, potentially leading to the establishment of an authenticated operator session. This exploit enables unauthorized control over control-plane methods, posing significant security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References