The Ministry of Industry and Information Technology issued a warning about the security risks of OpenClaw open-source AI agents.

The Ministry of Industry and Information Technology's Cybersecurity Threat and Vulnerability Information Sharing Platform recently detected that some instances of the OpenClaw (commonly known as "Lobster") open-source AI agent pose high security risks under default or improper configurations, easily leading to cyberattacks, information leaks, and other security issues. It is recommended that relevant organizations and users thoroughly verify public network exposure, permission configurations, and credential management when deploying and applying OpenClaw, disable unnecessary public network access, improve security mechanisms such as identity authentication, access control, data encryption, and security auditing, and continuously pay attention to official security announcements and hardening recommendations to prevent potential cybersecurity risks. (The Paper)