OpenClaw Fuels $1M Install Services Boom

🔑 Enhanced Key Takeaways

• •OpenClaw originated as 'Clawdbot,' renamed to 'Moltbot' then 'OpenClaw' due to Anthropic trademark pressure[1].
• •Founder Steinberger joined OpenAI, with Sam Altman praising him as a genius and indicating the technology will integrate into OpenAI products; project now governed by a foundation[1][3].
• •CVE-2026-25593 enables remote code execution via unsafe cliPath in WebSocket API, affecting versions before 2026.1.20, fixed with input sanitization[5].
• •Release v2026.2.23 introduced security hardening like optional HSTS headers, new providers (Kilo Gateway, Moonshot/Kimi with web_search), alongside 340+ malicious ClawHub skills reported[2][3][4].

🛠️ Technical Deep Dive

• •Single Gateway process integrates all messaging channels (e.g., WhatsApp, Slack), persistent Markdown-based memory, and proactive Heartbeat system for task initiation[1].
• •Skills are Markdown files published on ClawHub extending capabilities to real-time automation, application connectivity (IDE, home servers), but vulnerable to malicious injections like CVE-2026-25253 in AI gateway[4].
• •CVE-2026-25593 root cause: unsanitized cliPath in config.apply WebSocket endpoint allows command injection during discovery; fixed in v2026.1.20 with validation[5].
• •v2026.2.23 changes: HSTS headers, Claude Opus 4.6 routing, Vercel AI Gateway support, session maintenance, reasoning-leakage fixes[2].

🔮 Future ImplicationsAI analysis grounded in cited sources

⏳ Timeline