OpenClaw, a popular AI agentic tool with over 347,000 GitHub stars, recently had severe security vulnerabilities patched that allowed attackers with minimal permissions to gain full administrative control over users' systems. This flaw, which went unlisted with a formal CVE for two days after the patch release, posed a significant risk as many instances were exposed without authentication, potentially enabling widespread unnoticed compromises. Security experts advise users to assume compromise and reconsider using OpenClaw due to its broad access to sensitive data and autonomous capabilities.
OpenClaw Gives Users yet Another Reason to Be Freaked Out About Security
