Tag: openclaw

OpenClaw's Security Posture Under Fire: 160+ Advisories Signal Systemic Issues

OpenClaw faces criticism for weak security practices including 160+ advisories in one year and exclusion of key attack vectors from their threat model. The company lacks a bug bounty program despite the high volume of discovered vulnerabilities.

Mar 4, 2026Sam Bent

openclawsecurity-advisoriesvulnerability-management

highIndustry & Policy

Critical AI Tool Flaws and Supply Chain Exposure Highlight Security Challenges

A critical vulnerability in the popular OpenClaw AI tool joins a growing list of AI security issues, while research reveals 26,000 organizations were impacted by supply chain attacks. Meanwhile, law enforcement scored a major win with 30 arrests from 'The Com' cybercriminal collective.

Mar 3, 2026Dark Reading, Infosecurity Magazine

ai-securitysupply-chainvulnerability-management

highVulnerabilities & Exploits

Weekly Vulnerability Roundup: OpenClaw AI Agent Hijacking, Vim Command Injection, and Vitess Path Traversal

Security researchers disclosed a high-severity vulnerability in OpenClaw that allows malicious websites to hijack local AI agents via WebSocket connections. Microsoft's security update guide also published three new CVEs affecting Vim and Vitess.

Mar 1, 2026The Hacker News, MSRC Security Updates

vulnerability-disclosureai-securitycommand-injection

highVulnerabilities & Exploits

ClawJacked Vulnerability in OpenClaw Enables Browser-Based AI Agent Hijacking

Security researchers at Oasis Security have identified a critical vulnerability dubbed ClawJacked in OpenClaw that enables attackers to hijack AI agents through malicious websites. The attack requires only a simple browser tab to compromise AI assistants.

Feb 28, 2026Hackread

ai-securitybrowser-hijackingopenclaw

mediumMalware & Threats

Hudson Rock Warns: Infostealers Weaponize OpenClaw Configurations

Hudson Rock researchers warn that infostealers are targeting OpenClaw configuration files to steal victim credentials and digital assets.

Feb 17, 2026Infosecurity Magazine

infostealeropenclawcredential-theft

mediumNation-State & APT

Threat Roundup: AI Agent Targeting, Dark Web Data Sales, and Encrypted Messaging Evolution

New infostealer targets AI agent configs, Eurail data surfaces on dark web markets, Apple advances encrypted RCS messaging.

Feb 17, 2026Security Affairs

infostealerai-agentsopenclaw

🇺🇸Apple