National Internet Emergency Center Releases OpenClaw Security Application Risk Warning

CoinNetwork · 2026-03-10T12:53:42+00:00

The National Internet Emergency Center warns that the OpenClaw application has multiple security risks, including excessive permissions and weak default security configurations. Attackers can exploit these vulnerabilities to gain control of the system. Users are advised to strengthen network controls and improve credential management to prevent risks.

CoinNetwork

2026-03-10 12:53:42

Abstract generation in progress

Crypto World News reports that on March 10, the National Internet Emergency Center issued a security alert regarding the OpenClaw security application. The app has been granted high system permissions, including access to local file systems, reading environment variables, calling external service APIs, and installing extensions. However, due to its extremely weak default security configuration, attackers can easily gain full control of the system once they find a breach.

Initially, improper installation and use of the OpenClaw agent have already led to serious security risks, including: “prompt injection” risks, “misoperation” risks, plugin (skills) poisoning risks, and security vulnerabilities.

It is recommended that relevant organizations and individual users take the following security measures when deploying and using OpenClaw: strengthen network controls; enhance credential management; strictly manage plugin sources and disable automatic updates; continuously monitor patches and security updates, and promptly update versions and install security patches.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.