China’s National Computer Network Emergency Response Technical Team (CERT) has issued a warning regarding the OpenClaw agentic AI tool, highlighting significant security risks associated with its use. The advisory was shared via the agency’s WeChat account on March 12, 2026.
Security Concerns with OpenClaw
The CERT characterized OpenClaw as having an extremely weak default security configuration, which necessitates careful handling by users. The agency expressed concerns that attackers could exploit the tool by embedding malicious instructions in web pages, potentially leading to credential theft and other serious attacks.
Vulnerabilities and User Risks
OpenClaw has already been associated with several severe vulnerabilities that could allow for credential theft. Additionally, the CERT warned that user error could result in the accidental deletion of important data. These factors contribute to an overall risk profile that users must navigate cautiously.
Recommended Mitigations
To mitigate these risks, the CERT has recommended that users take specific precautions. These include isolating OpenClaw in a container, ensuring its management port is not accessible from the public internet, and implementing strict authentication and access control measures. Furthermore, users are advised to disable automatic updates and limit access to OpenClaw plugins.
Government Response and Wider Implications
In light of the CERT’s warning, local authorities have reportedly banned the use of OpenClaw in certain government agencies and state-run banks. This decision follows a noted increase in downloads and usage of OpenClaw, partly due to major domestic cloud platforms offering one-click deployment services. Notably, Tencent recently launched an OpenClaw-based tool called “Work Buddy,” which allows for quick integration with various chat platforms.
Analyst firm Gartner has echoed these concerns, labeling OpenClaw as an unacceptable cybersecurity risk for business users. They recommend operating the tool solely in isolated, non-production virtual machines with temporary credentials.
This article was produced by NeonPulse.today using human and AI-assisted editorial processes, based on publicly available information. Content may be edited for clarity and style.
Original source: theregister.com
