unknown

OpenClaw, an autonomous personal assistant formerly known as Clawdbot and Moltbot, continues to face serious security challenges despite rapid patching of multiple CVEs in early 2026. Its developer is joining OpenAI, transitioning the project into the OpenClaw Foundation. Key issues include over 21,000 publicly exposed instances, an AI agent supply chain attack (ClawHavoc) distributing infostealers via the official plugin marketplace, widespread API key theft, and persistent AI agent misconfiguration risks. In response, Adversa AI founder Alex Polyakov released SecureClaw, a free open-source auditing and hardening tool that runs 55 automated checks mapped to OWASP Agentic Security Initiative, MITRE ATLAS, and CoSAI frameworks. Despite these efforts, the scale of insecure deployments and the unsolved nature of prompt injection remain significant concerns.