Open Source AI Agent OpenClaw ('Lobster') Raises Security Concerns; China Internet Finance Association Issues Risk Alert

Recently, the China Internet Finance Association released a risk alert regarding the security of OpenClaw's application in the internet finance industry. OpenClaw, an open-source AI agent nicknamed 'Lobster', has seen rising download and usage due to its ability to control terminals via natural language commands and default high system permissions, but it also poses security risks. The Ministry of Industry and Information Technology's NVDB and the National Internet Emergency Center have issued related risk prompts.

In financial scenarios, the agent has multiple risks: attackers can exploit vulnerabilities or malicious plugins to steal fund information; automated operations may lead to unclear transaction responsibilities; data storage and transmission could cause compliance issues; and it may be used for new types of financial fraud.

The association recommends: Financial consumers should install it cautiously and not grant financial operation permissions; institutions should avoid using it on sensitive business terminals and strengthen employee security training.