#openclaw


Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws

Jul 10, 2026 // 17:25

Details have emerged about three now-patched security flaws in the OpenClaw personal artificial intelligence (AI) assistant that, if successfully exploited, could enable credential theft, privilege […]

New Attacks Trick OpenClaw AI Agent Into Running Code and Leaking Secrets

Jun 11, 2026 // 20:46

Two security teams have shown, in separate research published this week, that OpenClaw, the popular self-hosted AI agent, can be driven to run attacker-controlled code […]

OpenClaw AI agent found falling for phishing attacks, spills user data

Jun 10, 2026 // 00:37

Phishing simulation on an OpenClaw email agent with various configuration profiles showed that it was susceptible to tactics commonly used to compromise human users. The OpenClaw […]

Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence

May 15, 2026 // 16:35

Cybersecurity researchers have disclosed a set of four security flaws in OpenClaw that could be chained to achieve data theft, privilege escalation, and persistence. The […]

Hackers Use Fake OpenClaw npm Package to Deploy RAT on macOS

Mar 9, 2026 // 23:28

A malicious package named openclaw-installer was recently discovered on the npm registry targeting developers by mimicking a legitimate installer for the OpenClaw game engine. Attack Details The package was […]

Bing AI Recommends Fake OpenClaw Repo Hiding Info-Stealing Malware

Mar 6, 2026 // 01:52

Researchers have discovered that Microsoft Bing’s AI-powered search was recommending a malicious GitHub repository for OpenClaw, a popular open-source AI agent. This allowed threat actors to distribute info-stealing […]

Cline CLI 2.3.0 Compromised to Silently Install OpenClaw AI Agent

Feb 22, 2026 // 14:23

On February 17, 2026, the popular AI coding assistant Cline CLI (formerly Claude Dev) was the target of a supply chain attack where an unauthorized version, [email protected], was […]