AIThe Hacker Newsabout 2 hours ago
WhatsApp-to-Host Attack Via OpenClaw Flaws
1 min read
Three patched OpenClaw flaws (CVSS 8.8, 8.4, and one high-severity) allow credential theft, privilege escalation, and code execution. Researcher Chinmohan Nayak demonstrated host code execution from a WhatsApp message. The bugs bypass bind mount denylists, exposing SSH keys, AWS credentials, and Docker sockets. OpenClaw version 2026.6.6 fixes all issues.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMeta
