Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws

A researcher has unveiled a concerning attack chain that exploited three now-patched security flaws in the OpenClaw AI assistant, potentially allowing attackers to steal credentials, escalate privileges, and execute arbitrary code on the host system. With a CVSS score of 8.8 for one of the vulnerabilities, the risk was high, impacting the integrity and security of the host. This discovery underscores the critical importance of prompt patch management and vigilant security practices to safeguard against such high-severity threats.