OpenClaw SSH Command Injection (CVE-2026-25157)

nomit vyas@xoxo

•updated Jun 22, 2026•1•0•5

Detects exploitation of CVE-2026-25157 where the OpenClaw AI agent is manipulated to execute arbitrary commands via a malicious SSH target string. The vulnerability allows an attacker to inject command-line options like '-oProxyCommand' into the SSH client, leading to local command execution.