Safety, Alignment & InterpretabilityOpenClaw / depthfirst (Mav Levin)OpenClawJan 30, 2026

OpenClaw ships a fix for CVE-2026-25253

Shipped a fix for CVE-2026-25253 — the Control UI accepted unauthenticated WebSocket connections and trusted gatewayUrl without validation, enabling token theft followed by one-click RCE (CVSS 8.8)

Why it matters

The first major incident to shatter the assumption that local agents are safe. Origin validation has since become a baseline requirement

Source — Primary sources first; secondary reports are labelled “Press”

Pressthehackernews.comhttps://thehackernews.com/2026/02/openclaw-bug-enables-one-click-remote.html

Added in Week 35, 2026 · See that week

Same week

Jan 30OpenClaw name settled (Warelay→Clawdbot→Moltbot→OpenClaw)Press Jan 29Moltbot is renamed OpenClaw and launches an official blogOfficial Jan 29Moonshot AI releases Kimi K2.5Official Jan 29METR releases Time Horizon 1.1Official

Nearby on the same axis

Jan 30, 2026OpenClaw name settled (Warelay→Clawdbot→Moltbot→OpenClaw)Press Jan 28, 2026Cisco finds 26% of 31,000 agent skills have at least one vulnerabilityOfficial Feb 3, 2026UK ICO opens formal investigation into XIUC and X.AIPress Feb 5, 2026Claude Opus 4.6 system cardOfficial