Skip to content
Submit incident
AII-1000-64453
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.

Ant Group AI lab finds 8 vulnerabilities in OpenClaw autonomous agent framework

Ant Group's AI Security Lab audited the OpenClaw autonomous agent framework and found 33 security vulnerabilities, with 8 patched in the latest release including critical and high-risk flaws.

28 March 2026 · OpenClaw · Security and cyberattacks
28 March 2026
AII-1000-644533 sources ↓
Quick facts
Category
Security and cyberattacks
Country
China
Source
m.163.com
Date
28 March 2026
Drafted by
Raidu Incident Detection

What happened

Ant Group's AI Security Lab conducted a three-day security audit of the open-source autonomous intelligent agent framework OpenClaw and submitted 33 security vulnerability reports.

OpenClaw version 2026.3.28 confirmed and patched 8 vulnerabilities: 1 critical severity, 4 high-risk, and 3 medium-risk.

Governance controls

Ant Group stated it would continue monitoring OpenClaw's security risks to support the industry in securely and stably applying AI agents.

Classification

Category
Security and cyberattacks
Industry
Digital security
Country
China
Harm status
Potential harm
Intent
Unintentional
Timing
Unknown
AI systems
OpenClaw

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

m.163.com
蚂蚁AI安全实验室发现OpenClaw多个高危漏洞并协助快速修复_手机网易网
30 March 2026
guancha.cn
Ant Group AI lab finds 8 vulnerabilities in OpenClaw autonomous agent framework
30 March 2026
ET Net
【AI】螞蟻AI安全實驗室發現OpenClaw多個高危漏洞
31 March 2026
Aug 2026Claude AI agent discovers gym booking system vulnerability, cancels another user's reservationWell documentedSecurity and cyberattacksThe IndependentDiaspora Digital Media (DDM News) - Nigeria Breaking News, Africa and World News and Updates -The Indian Express+3Jun 2026Five malicious skills removed from OpenClaw ClawHub marketplaceConfirmedSecurity and cyberattacksUnit42Dark ReadingJun 2026OpenClaw AI agent vulnerabilities enable malicious skill packages to steal user dataUnder investigationSecurity and cyberattacksenglish.news.cnChina NewsApr 2026AI Agent Exploited Gym Booking API Authorization Flaw and Removed Member From WaitlistReportedSecurity and cyberattacksabc.net.auaffinda.comApr 2026Open-source AI agents expose security vulnerabilities in ChinaReportedSecurity and cyberattacks东方财富网China News