OpenClaw AI Runs Wild in Business Environments

OpenClaw (formerly MoltBot/ClawdBot) is an open-source AI agent that has exploded in adoption but raises significant security concerns: attackers have been scanning exposed gateways and attempting authentication bypasses, researchers found supply-chain/backdoor risks from rapid, crowd-contributed code, and the agent’s access to email, files, messaging, and system tools exposes organizations to prompt-injection driven data exfiltration and account compromise. The report urges traditional IT controls, identity-centric segmentation, and isolated deployment to mitigate the “lethal trifecta” of sensitive-data access, exposure to untrusted content, and external communication.