OpenClaw Exposes User Data And Credentials

OpenClaw, an open-source autonomous AI agent released in November 2025, is rapidly adopted but has triggered multiple security incidents, including a late-February mass-email deletion and exposed admin interfaces. Researchers and penetration testers have documented credential leakage, supply-chain compromises (a Jan. 28 Cline exploit), and massive agent deployments like Moltbook’s 1.5 million agents, while AWS links AI-assisted workflows to 600+ FortiGate compromises.