Hundreds of Exposed Clawdbot Gateways Leave API Keys and Private Chats Vulnerable

Clawdbot, an open-source AI assistant gateway, has over 900 publicly exposed instances due to a localhost auto-approval/authentication misconfiguration that is bypassed when services are fronted by reverse proxies; unsecured Control UIs and Gateways can expose Anthropic API keys, messaging tokens, months of chat history and permit remote command/tool execution, including root-level commands on some deployments — researchers disclosed findings and recommended proxy hardening, trusted proxy configuration, rotating secrets, and using tunneled access rather than direct public binds.