Behind OpenClaw's Global Deployment Boom: Major Security Risks Demand Attention, Experts Offer 5 Prevention Tips

OpenClaw has sparked a global deployment boom with its automated task processing capabilities and open plugin ecosystem. Data shows over 200,000 active global assets, and about 23,000 in China, concentrated in internet-dense regions like Beijing, Shanghai, and Guangzhou. However, many exposed OpenClaw assets face major security risks and are easy targets for cyberattacks.

Key risks include: multiple architectural design flaws (each layer can be breached); high default configuration risks (85% exposed to public networks with sensitive info stored in plaintext); numerous high-risk vulnerabilities (258 historical, 82 recent including 12 critical); high supply chain poisoning rate (10.8% of plugins contain malicious code); and uncontrollable agent behavior (prone to unauthorized task execution).

Experts suggest: update to the latest version to fix vulnerabilities; optimize configurations to avoid public exposure; be cautious with third-party plugins; strengthen account authentication; limit agent execution permissions.