Incidents tagged OpenClaw AI

The "ClawJacked" vulnerability in the OpenClaw AI personal assistant allows malicious websites to silently hijack a user's local AI agent. This exploit abuses the AI agent's inherent trust in localhost WebSocket connections, enabling attackers to bypass authentication and gain full control over the agent with system privileges.

The "ClawJacked" flaw allows malicious websites to hijack locally running OpenClaw AI agents by exploiting a critical vulnerability in the gateway's WebSocket server. This attack leverages a missing rate-limiting mechanism for localhost connections to brute-force passwords and auto-register as a trusted device, granting full control and enabling data exfiltration.

A critical log poisoning vulnerability has been identified within the OpenClaw AI platform. This flaw specifically allows for unauthorized content manipulation, potentially through the injection of malicious data into log files.

The OpenClaw AI agent is critically vulnerable to remote code execution and extensive data exfiltration due to an authentication bypass where misconfigured reverse proxies improperly trust external requests as local. Additionally, the agent is susceptible to prompt injection attacks, enabling the extraction of private keys and sensitive user data from the underlying system.

The OpenClaw AI bot farm is plagued by critical security flaws, including a one-click remote code execution vulnerability and two command injection vulnerabilities. These issues are exacerbated by a repository of 341 malicious extensions, an exposed database, and prevalent prompt injection attacks, leading to a wave of malware, data exposure, and significant financial costs for users.

According to the article title, over 21,000 OpenClaw AI instances have been identified exposing personal configuration data, indicating a significant data exposure event. This widespread issue points to potential misconfigurations or vulnerabilities within the OpenClaw AI platform allowing unauthorized access to sensitive information.