clawcheck 1.0.0

OpenClaw vulnerability scanner - Detect ClawJacked (CVE-2026-CLAW)

ClawCheck

🛡️ OpenClaw Vulnerability Scanner

Detect the ClawJacked vulnerability (CVE-2026-CLAW) in OpenClaw installations

Quick Start

pip install clawcheck
clawcheck

Overview

ClawCheck is a CLI security tool that detects the ClawJacked vulnerability in OpenClaw installations. The vulnerability, disclosed by Oasis Security on February 26, 2026, allows any website to silently hijack OpenClaw agents through WebSocket exploitation.

What it does:

• ✅ Scans for OpenClaw installations
• ✅ Checks version against vulnerable range (< 2026.2.25)
• ✅ Probes WebSocket gateway for security indicators
• ✅ Provides remediation guidance
• ✅ CI/CD integration (JSON/SARIF output)

What it doesn't do:

• ❌ No external data transmission (offline-capable)
• ❌ No brute-force attacks (read-only probes)
• ❌ No system modifications (in scan mode)

Installation

pip (Recommended)

pip install clawcheck

pipx (Isolated Installation)

pipx install clawcheck

From Source

git clone https://github.com/yourusername/clawcheck.git
cd clawcheck
pip install -e .

Usage

Basic Scan

clawcheck

Example output:

✗ VULNERABLE: 1 vulnerability(ies) found

┏━━━━━━━━━━━━━━━━ Target Information ━━━━━━━━━━━━━━━━┓
┃                                                      ┃
┃ OpenClaw Version    2026.2.12                       ┃
┃ Gateway Status      Running                         ┃
┃ Config Path         /Users/user/.openclaw/...         ┃
┃ Instance Type       local                           ┃
┃                                                      ┃
┗━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┛

┏━━━━━━━━━━ CLAWJACKED ━━━━━━━━━━━━ VULNERABLE ━━━━━━━━━━━┓
┃ WebSocket hijacking via localhost origin bypass         ┃
┃                                                              ┃
┃  Indicator             Status                            ┃
┃  ──────────             ──────                            ┃
┃  Version Check         VULNERABLE                        ┃
┃  Origin Validation     FAIL                              ┃
┃  Rate Limiting         FAIL                              ┃
┃  Trust Registration    FAIL                              ┃
┃                                                              ┃
┃  Auto-fix: openclaw upgrade                                ┃
┃  Manual steps:                                              ┃
┃    • Update to OpenClaw 2026.2.25 or later               ┃
┃    • Verify gateway configuration...                       ┃
┗━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┛

JSON Output

clawcheck --json
clawcheck --json --output results.json

SARIF Output (CI/CD)

clawcheck --sarif

Verbose Mode

clawcheck -v        # Verbose
clawcheck -vv       # Extra verbose (includes WebSocket probing)

Fix Mode

# Dry run - see what would be done
clawcheck fix --dry-run

# Apply fix (with confirmation)
clawcheck fix

# Apply fix without confirmation
clawcheck fix --force

Monitoring Mode

# Monitor continuously (60s interval)
clawcheck monitor

# Custom interval
clawcheck monitor --interval 30

# With log file
clawcheck monitor --log-file clawcheck.log

Advanced Options

# Custom timeout
clawcheck --timeout 60

# Custom config path
clawcheck --config-path /custom/path/openclaw.json

# All options combined
clawcheck -vv --json --output scan.json --timeout 60

Exit Codes

Code	Meaning	Use Case
0	SECURE	No vulnerabilities found
1	VULNERABLE	Vulnerabilities detected
2	ERROR	Scan error (permissions, timeout, etc.)
3	NOT_FOUND	OpenClaw not installed or not running

Script Integration Example:

#!/bin/bash
clawcheck --json --output scan.json
EXIT_CODE=$?

case $EXIT_CODE in
  0) echo "✓ Secure - no action needed" ;;
  1) echo "✗ Vulnerable - apply fix with: clawcheck fix" ;;
  2) echo "⚠ Error - check logs" ;;
  3) echo "○ OpenClaw not found" ;;
esac

exit $EXIT_CODE

About the Vulnerability

ClawJacked (CVE-2026-CLAW)

Disclosed: February 26, 2026 Severity: HIGH Affected Versions: OpenClaw < 2026.2.25

Attack Vector:

1. WebSocket Origin Bypass - Malicious JavaScript can connect to localhost:18789 without CORS restrictions
2. No Localhost Rate Limiting - Brute-force attacks at hundreds of attempts per second
3. Automatic Trust Registration - Successful auth from localhost auto-approves device pairing

Impact: Full workstation compromise initiated from a browser tab

Fix: Update to OpenClaw 2026.2.25 or later

Source: Oasis Security Vulnerability Disclosure

Safety & Privacy

• ✅ Offline-capable - No external data transmission
• ✅ Read-only probes - No system modification
• ✅ Rate-limited - 1 request/second (AWS cooperative scanning guidelines)
• ✅ No brute-force - Never attempts password guessing
• ✅ Open source - Fully auditable code

Development

Running Tests

# Install dev dependencies
pip install -e ".[dev]"

# Run tests
pytest

# Run with coverage
pytest --cov=clawcheck --cov-report=html

Project Structure

clawcheck/
├── src/clawcheck/
│   ├── __init__.py
│   ├── cli.py           # Click CLI interface
│   ├── discovery.py     # OpenClaw discovery
│   ├── models.py        # Data models
│   ├── output.py        # Output formatters
│   ├── probe.py         # WebSocket vulnerability probe
│   └── vuln_db.py       # Vulnerability database
├── tests/
│   ├── unit/            # Unit tests
│   └── integration/     # Integration tests
├── docs/                # Documentation
├── pyproject.toml
└── README.md

Contributing

Contributions are welcome! Please:

1. Fork the repository
2. Create a feature branch
3. Make your changes
4. Add tests for new functionality
5. Run tests and linting
6. Submit a pull request

License

MIT License - see LICENSE file for details

Disclaimer

This tool is for security testing purposes only. Always obtain proper authorization before scanning systems. The authors are not responsible for misuse of this software.

Links

• Oasis Security: ClawJacked Vulnerability
• OpenClaw Repository
• SARIF v2.1.0 Specification

---

Stay secure! 🛡️