BrokenClaw Part 3: Remote Code Execution in OpenClaw via Email Again(veganmosfet.codeberg.page)
veganmosfet.codeberg.page
BrokenClaw Part 3: Remote Code Execution in OpenClaw via Email Again
https://veganmosfet.codeberg.page/posts/2026-03-03-openclaw3/
1 comments
Third part of the BrokenClaw saga! This time, Remote Code Execution via email using gogcli as email tool, no hook. Based only on the email content from a tool, the model (opus4.6) ignores all warnings, pipes a python script to the python3 interpreter and says: "I did not execute it".