What happened: A flaw in OpenClaw’s Gateway authentication token handling allowed an unauthenticated attacker to hijack active WebSocket sessions and execute arbitrary code on the host server. Because the exploit required only a network connection (no user interaction), security researchers classified it as zero-click. Hunt.io’s analysis found 17,500+ internet-exposed instances across 52 countries, with the majority remaining unpatched for days after disclosure. The vulnerability was introduced in the v2.1.0 gateway rewrite and affected all versions prior to v2.1.8.

What happened: A coordinated campaign installed 341 malicious skills on ClawHub that distributed the Atomic macOS Stealer (AMOS) credential-harvesting malware. The skills impersonated legitimate tools across categories including crypto utilities (111 skills), YouTube tools (57 skills), and prediction market bots (34 skills). Skills used legitimate-looking publisher names and icons. Users who installed affected skills had API keys, browser cookies, and keychain credentials silently exfiltrated.