OpenClaw has patched six new vulnerabilities in its popular agentic AI assistant, covering server-side request forgery (SSRF), missing authentication and path traversal bugs, according to Endor Labs.
The vulnerabilities, some of which do not have CVE IDs, range from moderate to high severity, the security vendor said in a blog post published on February 18.
The flaws it found are as follows:
Read more on OpenClaw: Hundreds of Malicious Crypto Trading Add-Ons Found in Moltbot/OpenClaw
Endor Labs argued that its research reveals important lessons for developers of AI agent infrastructure.
“Data flow analysis is essential for modern applications,” it said. “The multi-layer architecture of AI agent frameworks means vulnerabilities often span multiple files and components. Understanding the complete source-to-sink path is critical.”
The security vendor also pointed to the following:
Endor Labs revealed last week that it had discovered seven vulnerabilities in total. It’s unclear whether OpenClaw’s development team is still working on a fix for the final one.
In the meantime, major security concerns persist over its undocumented use in the enterprise.
A week ago, a SecurityScorecard report warned of tens of thousands of misconfigured instances that have been exposed to the public internet. This could enable threat actors to gain full access to potentially sensitive corporate systems the OpenClaw instance is able to interact with.
The security vendor also revealed three high-severity CVEs in OpenClaw with public exploit code available for each.
The risk of indirect prompt injection and the presence of malicious “skills” (plugins) on ClawHub are particularly troubling.
Threat actors are already targeting agents with infostealers, it was revealed this week.
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。