Pinclaw
Monthly
Blind prompt injection into a user's OpenClaw agent session is possible through the Pinclaw channel plugin version 0.3.0 and earlier, because the HTTP router skips the authToken check on POST /pinclaw/send. The service binds all interfaces on port 18790 by default, but per the assessed CVSS vector exploitation requires adjacent-network access (same LAN or Wi-Fi) rather than arbitrary internet reachability, so real-world risk is moderate rather than urgent. Successful abuse lets an unauthenticated attacker plant instructions into the victim's agent session, affecting integrity only; no public exploit code has been identified at time of analysis.
Blind prompt injection into a user's OpenClaw agent session is possible through the Pinclaw channel plugin version 0.3.0 and earlier, because the HTTP router skips the authToken check on POST /pinclaw/send. The service binds all interfaces on port 18790 by default, but per the assessed CVSS vector exploitation requires adjacent-network access (same LAN or Wi-Fi) rather than arbitrary internet reachability, so real-world risk is moderate rather than urgent. Successful abuse lets an unauthenticated attacker plant instructions into the victim's agent session, affecting integrity only; no public exploit code has been identified at time of analysis.