How a Simple HTTP Request Opened the Door to a Reverse Shell: Exposed OpenFang Instances

How an allowed curl request became a full reverse shell in an exposed Openclaw instance. A single HTTP request with curl, pointed at a small HTTP server under my control and a text file containing shell commands, was enough to pivot an exposed OpenFang agent from “safe” behavior to a reverse shell