OpenClaw Security Crises & Mitigations

CVE-2026-25253 token leak (CVSS 8.8) and ClawHavoc (20% malware/800 malicious skills) atop prior CVEs; prompt injection/creds risks in 135k installs. New tools/guides: Enkrypt ClawPatrol (gateway/skill scans), NanoClaw-Vercel approvals, Tailscale/openclaw doctor/verbose logs; mitigations advance (v4.10+/ClawKeeper/Watchtower/Claw Lens/ClawSecure/zero-trust/Docker).