OpenClaw Flaw Enables AI Log Poisoning Risk

Back Esecurityplanet

OpenClaw Flaw Enables AI Log Poisoning Risk

Esecurityplanet • February 18, 2026

Share: View original

OpenClaw versions prior to 2026.2.13 logged unsanitized WebSocket headers, creating a potential AI log poisoning risk.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

OpenClaw Vulnerability Allows AI Log Poisoning via Unsanitized Headers OpenClaw versions prior to 2026.2.13 have a vulnerability that logs unsanitized WebSocket headers. This flaw creates a risk of AI log poisoning, potentially affecting systems that utilize these versions. Users are advised to update to the latest version to mitigate this risk. 2 sources 29

Extracted Entities

Platforms (1)