OpenClaw AI Agent Sparks Global Security Alarm

Open-Source Tool Security 'Dumpster Fire,' Experts Warn Rashmi Ramesh (rashmiramesh_) • February 5, 2026

An open-source artificial intelligence assistant that exploded in popularity over the past month is exposing users to data theft, malicious code and runaway costs.

See Also: On-Demand | NYDFS MFA Compliance: Real-World Solutions for Financial Institutions

OpenClaw, previously known as Clawdbot and Moltbot, launched in November as a platform allowing users to create AI assistants that perform tasks like managing calendars, sending emails and booking flights by connecting to messaging apps like WhatsApp and iMessage. Rapid adoption has exposed vulnerabilities that security specialists say make the tool dangerous for enterprise and personal use. Over three days, the project issued three high-impact security advisories covering a one-click remote code execution vulnerability and two command injection vulnerabilities.

Users can add functions called "skills" that connect assistants with different services - and hackers have been quick to add malicious ...