Infostealers added Clawdbot to their target lists before most security teams knew it was running
Clawdbot's MCP implementation has no mandatory authentication, allows prompt injection, and grants shell access by ...
venturebeat