
- Oasis security researchers find a high-severity flaw in OpenClaw AI agent
- Exploit allowed malicious websites to brute-force local gateway authentication and gain full control
- Vulnerability patched within 24 hours; users urged to upgrade to version 2026.2.25 or later