2026-03-10 · 2026-Q1

Meta Acquires Moltbook (OpenClaw) After Security Crises

Outside the model: ContextAgent tooling was not the attack surface, so no layer applies.

Fixable: Unknown
Vendor response: Unknown
In the wild: No
Actor: Not applicable

Target

Moltbook/OpenClaw platform

Impact

Meta acquired the platform after exposed database (1.5M API tokens, 35K emails), 1,184+ malicious skills distributing Atomic Stealer, and 135K exposed instances

Root cause

Unsecured database; no skill vetting; WebSocket accepting unauthenticated localhost connections

CVEs

CVE-2026-25253
CVE-2026-25593

Sources

Wiz
eSecurity Planet
BleepingComputer

Catalog

View this entry in the catalog

Cite this: AgentProv incident record: Meta Acquires Moltbook (OpenClaw) After Security Crises (2026-03-10). https://agentprov.com/incidents/2026-03-10-meta-acquires-moltbook-openclaw-after-security-crises