Digest · Saturday

Security digest: January 31, 2026

1 editorial brief.

All digests · RSS · Markdown

Take stock

Patch this week: OpenClaw CVE-2026-25253: One-Click RCE via Token Leak. Anyone running an OpenClaw/Clawdbot/Moltbot gateway older than 2026.1.29, including on a laptop bound to localhost.
None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Editorial briefs

Patch this week

Jan 31, 2026 · AI agent security · CVE-2026-25253

OpenClaw CVE-2026-25253: One-Click RCE via Token Leak

Fixed since January, but any OpenClaw install that missed updates can be taken over by its owner clicking one link, and a loopback-only setup does not save it.

Must act: Anyone running an OpenClaw/Clawdbot/Moltbot gateway older than 2026.1.29, including on a laptop bound to localhost.

Can relax: Users already on 2026.1.29 or later who have rotated their gateway token since; people who never ran OpenClaw.

Check your version (openclaw --version or the Control UI) and update to 2026.1.29 or later
Rotate the gateway auth token after updating
Review exec approval settings and confirm tools.exec.host still points at the sandbox, not the gateway host

Read the brief →

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 0

GitHub-reviewed advisories rated critical, published this day (Pacific time).

None.