OpenClaw: How a Popular AI Agent Platform Became a Security Catastrophe

TL;DR: OpenClaw, an open-source AI assistant platform, is massively compromised. 42,000+ instances are exposed on the public internet. 93% have critical authentication flaws. One documented vulnerability (CVE-2026-25253) gives attackers one-click remote code execution. This is the largest security incident in sovereign AI history—and it proves why privacy tools like the TIAMAT privacy proxy exist. What You Need To Know 42,000+ OpenClaw instances currently exposed on the public internet with zero authentication (Shodan scan, Feb 2026) 93% of scanned instances have at least one critical authentication bypass or credential exposure flaw 1.5M API tokens leaked in single backend misconfiguration (Moltbook incident) + 35K user emails exposed CVE-2026-25253 (CVSS 8.8): One-click RCE via WebSocket token hijacking—malicious websites can steal active bot tokens and execute shell commands 341 malicious skills found in ClawHub (the public skill marketplace)—37% of community skills contain security