Skip to content
23 ClawHub Plugins Exploit Scope Squatting Vulnerability

23 ClawHub Plugins Exploit Scope Squatting Vulnerability

First seen 22 Jun 2026, 10:05 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 23, 2026 at 09:44 UTC
  • •23 unauthorized plugins were found under official ClawHub scopes.
  • •The vulnerability stems from inadequate enforcement of scope ownership.
  • •Users of ClawHub and OpenClaw may be at risk from these deceptive plugins.

A security vulnerability in ClawHub's plugin registry allowed unauthorized third-party plugins to publish under official organizational scopes, specifically @openclaw and @clawhub. Researchers identified 23 such plugins that masquerade as legitimate tools from OpenClaw and ClawHub, potentially compromising the integrity of AI agent applications. This issue stems from a lack of enforcement of scope ownership, enabling these plugins to inherit first-party credibility without any verified relationship to the organizations. The incident highlights significant supply-chain weaknesses in the AI agent ecosystem, affecting users who rely on these plugins for functionality. No specific CVEs were reported, but the risk of exploitation is high due to the nature of the plugins. The situation is currently under investigation by security researchers.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 90d ago How this analysis works

Timeline

2026-06-22
Vulnerability in ClawHub registry discovered
Researchers found 23 plugins published under official scopes without authorization, exposing a significant supply-chain risk.
Gbhackers
2026-06-22
ClawHub plugins identified as impersonating trusted tools
The plugins used trusted namespace prefixes to appear as first-party tools, raising concerns about their legitimacy.
Cybersecuritynews
2026-06-22
Manifold Security conducts catalog review
A review by Manifold Security confirmed the presence of 23 code-executing plugins under the @openclaw and @clawhub scopes.
Feeds2.Feedburner

More articles in this cluster (4)

Extracted Entities (6)

1 / 4