The National Cybersecurity Warning Center of China issued a security risk alert for OpenClaw

The monitoring data from the China National Cybersecurity and Information Security Information Notification Center shows that there are currently over 200,000 active OpenClaw internet assets worldwide, with approximately 23,000 active OpenClaw internet assets within the country, exhibiting explosive growth, mainly concentrated in internet resource-intensive areas such as Beijing, Shanghai, Guangdong, Zhejiang, Sichuan, and Jiangsu.

A large number of OpenClaw assets exposed to the internet pose significant security risks and are likely to become prime targets for cyberattacks. Among them, the behavior of the agents is uncontrollable, making management difficult. During the execution of commands, OpenClaw agents are prone to privilege escalation, leading to unauthorized task execution and disregard for user instructions, which may result in the deletion of user data, theft of user information, and takeover of user terminal devices, causing significant economic losses.