GoPlus: OpenClaw Gateway currently has a high-risk vulnerability, please upgrade to version 2026.2.25 or higher immediately
By: rootdata|2026/03/02 13:45:18
0
Share
GoPlus Chinese community issues a warning, the OpenClaw Gateway has a high-risk vulnerability. Please upgrade to version 2026.2.25 or higher immediately, audit and revoke unnecessary credentials, API keys, and node permissions granted to Agent instances.
The analysis states that OpenClaw operates through a WebSocket Gateway bound to the localhost, which serves as the core coordination layer for the Agent and is an important component of OpenClaw. This attack targets the vulnerabilities in the Gateway layer, requiring only one condition: the user visits a malicious website controlled by hackers in their browser.
The complete attack chain is as follows: 1. The victim visits a malicious website controlled by the attacker in their browser; 2. JavaScript on the page initiates a WebSocket connection to the OpenClaw gateway on the localhost; 3. Subsequently, the attack script attempts to brute-force the gateway password hundreds of times per second; 4. Upon successful cracking, the attack script silently registers as a trusted device; 5. The attacker gains administrator-level control over the Agent.
You may also like
In the name of charity, for the benefit of the family: How the Trump family turned charity into profit?
This set of "beautiful rhetoric and value return to one's own people" has not stopped at charitable foundations; it has now almost been transferred intact to American Bitcoin.
Will Gold Break $4,500 After Tonight's Fed Decision? What XAUT and PAXG Traders Need to Know
The Federal Reserve announces its June rate decision tonight. Could gold break $4,500 next? Explore the latest gold price prediction, key Fed scenarios, and what they mean for XAUT and PAXG traders.
Cursor, why did you get on Musk's spaceship?
SpaceX set a record with its IPO, spending a staggering $60 billion to acquire the popular AI programming unicorn Cursor just four days later. Musk is using the ultimate puzzle of "super computing power + top coding engine" to propel the market value skyrocketing, surpassing Amazon in one fell swoop...
Morning Report | DeepSeek completes over $7 billion in financing, with a valuation exceeding $50 billion; Musk's personal wealth has surpassed the total market value of Bitcoin
Overview of Important Market Events on June 16
SharpLink CEO: How to understand that Ethereum developers have just surpassed 1 million?
The most important question in the cryptocurrency industry is not which chain is the fastest, but rather where top builders choose to build in the long term. Ethereum has just surpassed one million cumulative developers; what does this number mean?
Morning Report | MiCA grace period expires on July 1; Kalshi's trading volume in the first week of the World Cup breaks $5.1 billion, setting a record
Overview of Important Market Events on June 15
The foundation of SpaceX's trillion-dollar valuation: Who is dividing Musk's annual capital expenditure of tens of billions?
SpaceX Supply Chain Revealed: The Invisible Gold Mine Behind the Trillion-Dollar "Space Dream," from Nvidia's Computing Power Monopoly to China's Sole Supplier of Special Materials, these overlooked water-selling talents are the true wealth creation engine.
How to exit after asset tokenization?
Currently, three models have emerged, aimed at providing instant exit routes for tokenized real-world assets. Their differences lie in: who holds the funds required for exit, how efficiently the funds operate, and the extent to which this model can be scaled across different asset types.
The stablecoin positioning battle escalates: When compliance is just a ticket to entry, will USD1 become the biggest winner?
How does the GENIUS Act reshape the stablecoin landscape?
A16Z: The sun bears witness, SpaceX is worth 7.5 trillion
A deep analysis of Musk's ultimate grand vision: how SpaceX, xAI, and Tesla are deeply intertwined, using space AI data centers and Starships to gradually turn the sci-fi fantasies of Mars colonization and multi-planetary civilization into reality.
Mergers and acquisitions in the cryptocurrency market are exceptionally active
Behind the rise in mergers and acquisitions is a sluggish financing market, declining project valuations, and increased pressure for startup teams to exit. However, it also indicates that the cryptocurrency industry has not lost its capital vitality, but is completing resource reorganization in anot...
Concerns Behind the Binance Customer Service Controversy
As the user base expands to the scale of Binance today, relying on the personal efforts of the founder and a few employees to fill process gaps has become an unsustainable arrangement.
SpaceX Stock Prediction After the IPO: Can SPCX Reach $200 Before QQQ Inclusion?
SpaceX stock has become one of the hottest trades of 2026. Can SPCX reach $200 before QQQ inclusion? Discover the latest SpaceX stock prediction, analyst targets, Bitcoin exposure, and the key catalysts that could move SpaceX stock after its historic IPO.
Congratulations to Carl Moon on His Historic Ferrari Challenge Le Mans Podium Triumph
Crypto influencer and racing enthusiast Carl Moon finished third in the Ferrari Challenge Le Mans Coppa Shell class, marking his best result of the year. As his racing partner and sponsor, WEEX celebrates this remarkable achievement and continues to lead crypto’s journey beyond boundaries, uniting the innovation of digital assets with the passion of motorsport.
Can the CLARITY Act Become Law by July 4? Everything You Need to Know About the Final Battle
The CLARITY Act has cleared a major Senate hurdle, but the hardest battle is still ahead. With the July 4 deadline approaching, can the White House finally pass its biggest crypto regulation bill? Find the clues in our exclusive analysis below.
France vs Senegal World Cup 2026: Mbappe’s New Era Begins Against a Historic Rival
France vs Senegal World Cup 2026 preview: Can Mbappe lead France past Senegal after the shocking 2002 World Cup defeat? Full team news, predicted lineups, key battles, and WEEX's exclusive match prediction.
What is the connection between Huang Zheng of Pinduoduo and blockchain?
From Pinduoduo's "reverse insurance" to blockchain's smart contracts, this article explains how Huang Zheng's underlying logic uses "certainty" rules to reshape the flow of wealth for ordinary people.
Morning Report | Prediction market platforms like Kalshi and Polymarket jointly sue Kentucky over 14.25% trading tax; Bridgewater founder discusses decision-making in the AI era: principled thinking should run parallel to AI, human insight remains irre...
Overview of Important Market Events on June 15
In the name of charity, for the benefit of the family: How the Trump family turned charity into profit?
This set of "beautiful rhetoric and value return to one's own people" has not stopped at charitable foundations; it has now almost been transferred intact to American Bitcoin.
Will Gold Break $4,500 After Tonight's Fed Decision? What XAUT and PAXG Traders Need to Know
The Federal Reserve announces its June rate decision tonight. Could gold break $4,500 next? Explore the latest gold price prediction, key Fed scenarios, and what they mean for XAUT and PAXG traders.
Cursor, why did you get on Musk's spaceship?
SpaceX set a record with its IPO, spending a staggering $60 billion to acquire the popular AI programming unicorn Cursor just four days later. Musk is using the ultimate puzzle of "super computing power + top coding engine" to propel the market value skyrocketing, surpassing Amazon in one fell swoop...
Morning Report | DeepSeek completes over $7 billion in financing, with a valuation exceeding $50 billion; Musk's personal wealth has surpassed the total market value of Bitcoin
Overview of Important Market Events on June 16
SharpLink CEO: How to understand that Ethereum developers have just surpassed 1 million?
The most important question in the cryptocurrency industry is not which chain is the fastest, but rather where top builders choose to build in the long term. Ethereum has just surpassed one million cumulative developers; what does this number mean?
Morning Report | MiCA grace period expires on July 1; Kalshi's trading volume in the first week of the World Cup breaks $5.1 billion, setting a record
Overview of Important Market Events on June 15
Popular coins
Latest Crypto News
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com
