Ministry of Industry and Information Technology issues early warning on the security risks of open-source AI intelligent agents OpenClaw

ChainCatcher Message: The Ministry of Industry and Information Technology’s Cybersecurity Threat and Vulnerability Information Sharing Platform recently detected that some instances of OpenClaw (commonly known as “Lobster”) open-source AI agents pose significant security risks when configured with default or improper settings. These vulnerabilities can easily lead to cyberattacks, information leaks, and other security issues. It is recommended that relevant organizations and users thoroughly check public exposure, permission settings, and credential management when deploying and using OpenClaw. Close unnecessary public access, improve security mechanisms such as authentication, access control, data encryption, and security auditing, and stay updated on official security notices and reinforcement suggestions to prevent potential cybersecurity risks.