Sunday, May 31, 2026 · 2 of 5
OpenClaw agent framework hit by a one-click RCE (CVE-2026-25253, CVSS 8.8) and a poisoned skill registry — ~12% of ClawHub skills found malicious
(late May) — If you run any self-hosted agent framework or pull community "skills," this is the week's most actionable item. (Cybersecurity News | Reco)