OpenClaw Security Breach: 42,000 Instances Exposed
OpenClaw experienced a significant security breach with 42,000 exposed instances and 341 malicious marketplace skills. Five CVEs were identified, indicating the severity of the vulnerabilities. As a response, AgentVault was developed to act as a security proxy that wraps around Claude agents, providing real-time monitoring and management of operations.
Key features of AgentVault include:
- Blocking dangerous commands such as
rm -rfand suspicious network requests before execution. - A real-time dashboard that displays every action attempted by Claude.
- Permission approval mechanisms for risky operations.
- Comprehensive network monitoring, rate limiting, and credential scanning functionalities.
- A full audit trail to track all activities.
This solution utilizes a Node.js proxy, SQLite for logging, and a Next.js-based dashboard. Remarkably, AgentVault was built in a 3-hour session due to the urgency of the situation. Its source code has been made open-source and can be reviewed on GitHub.
The incident and rapid development of AgentVault raise questions about security measures in place for local setups utilizing AI coding agents. What security protocols are you using?
📖 Read the full source: r/LocalLLaMA
👀 See Also
Three open-source alternatives to litellm after PyPI supply chain attack
litellm versions 1.82.7 and 1.82.8 on PyPI were compromised with credential-stealing malware. Three open-source alternatives include Bifrost (Go-based, ~50x faster P99 latency), Kosong (agent-oriented from Kimi), and Helicone (AI gateway with analytics).
OpenClaw Security: 13 Practical Steps to Lock Down Your AI Agent
A Reddit post outlines 13 security measures for OpenClaw installations, including running on a separate machine, using Tailscale for network isolation, sandboxing subagents in Docker, and configuring allowlists for user access.
Tool Authority Injection in LLM Agents: When Tool Output Overrides System Intent
A researcher demonstrates 'Tool Authority Injection' in a local LLM agent lab, showing how trusted tool output can be elevated to policy-level authority, silently changing agent behavior while sandbox and file access remain secure.
OpenClaw Skill Safety Scanner: 7.6% of 31,371 Skills Flagged as Dangerous
A developer built a tool that scanned the entire ClawHub registry and found 2,371 out of 31,371 skills contain dangerous patterns like wallet drainers, credential theft, and prompt injection. The tool provides API access and badges for checking skills before installation.