[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-B97iv8eRgkR3A239YAnPVu1TXuz-C08hNz8heBM0Sc":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":138},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"805636fc-f085-45e5-a4cd-e3b15488e6fd","OpenClaw: risks for agent users and how to mitigate them","openclaw-risks-for-agent-users-and-how-to-mitigate-them-d0c194","Researching OpenClaw vulnerabilities, malicious skills and other security issues with the popular agent, and providing tips on how to mitigate them.","Kaspersky research reveals significant security risks in OpenClaw, a popular AI agent ecosystem used for task automation. The platform has accumulated approximately 530 vulnerabilities since its inception, with high-severity issues primarily involving sensitive data storage and privilege escalation. Beyond CVE exploits, attackers can distribute malicious skills through ClawHub, the official marketplace, creating a supply-chain-like attack vector that requires no malware development.","OpenClaw agent ecosystem faces 530+ CVEs and malicious skill attacks via ClawHub marketplace.","https:\u002F\u002Fsecurelist.com\u002Fopenclaw-security\u002F120484\u002F","https:\u002F\u002Fmedia.kasperskycontenthub.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F43\u002F2026\u002F06\u002F30174929\u002FSL-OpenClaw-skills-featured-scaled.jpg","2026-07-01T06:42:48+00:00","2026-07-01T14:00:22.209954+00:00",7,[17,20,22,25],{"name":18,"type":19},"OpenClaw","product",{"name":21,"type":19},"ClawHub",{"name":23,"type":24},"Kaspersky","vendor",{"name":26,"type":27},"AI agents","technology","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":28,"icon":30,"name":31,"slug":32},null,"AI Security","ai-security",[34,39,44],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":40},{"id":41,"icon":30,"name":42,"slug":43},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":45},{"id":46,"icon":30,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[23,18,21],{"controls":52,"vendors":137},[53,82,110],{"slug":54,"name":55,"problem":56,"products":57},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[58,66,74],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":32,"name":83,"problem":84,"products":85},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[86,94,102],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"slug":111,"name":112,"problem":113,"products":114},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[115,121,129],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":116,"product_name":117,"url":119,"description":120},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png","https:\u002F\u002Fsocket.dev\u002F","Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"snyk","Snyk","\u002Fvendor-logos\u002Fsnyk.png","snyk-open-source","Snyk Open Source","https:\u002F\u002Fsnyk.io\u002Fproduct\u002Fopen-source-security-management\u002F","Finds and fixes vulnerable open-source dependencies in code and pipelines.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-xray","JFrog Xray","https:\u002F\u002Fjfrog.com\u002Fxray\u002F","Software composition analysis and SBOM generation for artifacts.",[],{"slug":139,"title":140,"body":141,"framework_refs":142,"framework_notes":155},"ai-agent-ecosystem-openclaw-exposes-users-to-supply-chain-and-privilege-escalation-risks","AI Agent Ecosystem OpenClaw Exposes Users to Supply Chain and Privilege Escalation Risks","The OpenClaw platform has accumulated approximately 530 vulnerabilities, with high-severity issues centered on sensitive data exposure and privilege escalation — a dangerous combination in any AI-driven automation environment. More critically, attackers can publish malicious 'skills' through ClawHub, the platform's official marketplace, weaponizing the trusted distribution channel itself without writing traditional malware. This mirrors classic software supply chain attacks, where legitimacy is borrowed from a trusted source to bypass defenses. Organizations relying on AI agent ecosystems must recognize that the attack surface extends well beyond CVEs to include third-party content and plugins. Failing to vet marketplace components and delay patching in these environments can result in full compromise of automated workflows handling sensitive data.",[143,144,145,146,147,148,149,150,151,152,153,154],"CIS Control 2 - Inventory and Control of Software Assets","CIS Control 7 - Continuous Vulnerability Management","CIS Control 16 - Application Software Security","NIST SP 800-161 - Supply Chain Risk Management","NIST AC-6 - Least Privilege","NIST SI-2 - Flaw Remediation","NIST AU-12 - Audit Record Generation","NIST SR-3 - Supply Chain Controls and Processes","GDPR Article 25 - Data Protection by Design and by Default","GDPR Article 32 - Security of Processing","MITRE ATT&CK T1195 - Supply Chain Compromise","MITRE ATT&CK T1068 - Exploitation for Privilege Escalation",{}]