OpenClaw AI Agent Flaws Could Enable Prompt Injection and Data Exfiltration
OpenClaw AI agent has weak default security configurations that could enable prompt injection and data exfiltration.
China's National Computer Network Emergency Response Technical Team (CNCERT) has issued a warning about the security stemming from the use of OpenClaw (formerly Clawdbot and Moltbot), an open-source and self-hosted autonomous artificial intelligence (AI) agent. In a post shared on WeChat, CNCERT noted that the platform's "inherently weak default security configurations," coupled with its