BSidesSF 2026 - From Assistant to Assassin: Weaponizing An OpenClaw Vulnerability to... (Mav Levin)

This talk dissects a 1-click Remote Code Execution (RCE) chain in OpenClaw, where the speaker, Mav Levin, explores a configuration logic vulnerability alongside a Cross-Site WebSocket Hijacking flaw. The session details how these vulnerabilities can be combined to effectively bypass network defenses, sandboxing mechanisms, and user approval processes to take control of AI assistants. Through this analysis, attendees gain insights into the critical security implications surrounding modern AI technologies.