OpenClaw10 min read
ClawJacked: Any Website Could Hijack Your OpenClaw Agent
Oasis Security showed any website can silently hijack a local OpenClaw agent via localhost WebSocket. The 24-hour patch shipped. The design didn't change.
By Linas ValiukasTryOpenClaw Blog
Read the full story
Originally published by TryOpenClaw Blog on May 1, 2026.
Comments
Sign in to join the discussion.