Claw Chain

The 'Claw Chain' vulnerabilities in OpenClaw deployments have been patched, but previously allowed attackers to steal credentials, escalate privileges, and maintain persistence, posing a significant threat to the AI agent framework. The vulnerabilities were found in the rapidly growing framework. The patch addresses the security risks associated with these vulnerabilities.

Cybersecurity researchers disclosed four security flaws in OpenClaw, dubbed Claw Chain, which can be chained to achieve data theft, privilege escalation, and persistence. These vulnerabilities permit an attacker to establish a foothold, expose sensitive data, and plant backdoors. The flaws were identified by Cyera.