Lock the Front Door: The “Localhost” Loophole Leaving Thousands of Clawdbot Agents Exposed

Clawdbot instances deployed with default local-development settings can be trivially exposed when placed behind reverse proxies (NGINX/Caddy) that rewrite client IPs to 127.0.0.1, allowing external requests to bypass authentication and enabling attackers to execute commands and exfiltrate sensitive telemetry and credentials; researchers found ~1,000 publicly reachable instances with at least ~300 unauthenticated, and maintainers have issued configuration fixes and documentation updates.