Ministry of Industry and Information Technology Issues Warning on Security Risks of OpenClaw Open-Source AI Agent

Odaily News According to the Ministry of Industry and Information Technology's Cybersecurity Threat and Vulnerability Information Sharing Platform, recent monitoring has identified that certain instances of the OpenClaw (commonly known as "Lobster") open-source AI agent pose significant security risks under default or improper configurations, which can easily lead to network attacks, information leaks, and other security issues. It is recommended that relevant organizations and users, when deploying and applying OpenClaw, thoroughly verify public network exposure, permission configurations, and credential management, disable unnecessary public network access, enhance security mechanisms such as identity authentication, access control, data encryption, and security auditing, and continuously monitor official security bulletins and hardening recommendations to guard against potential cybersecurity risks. (The Paper)