The National Computer Network Emergency Response Technical Team/Coordination Center of China (CNCERT/CC) issued a risk warning regarding the security applications of OpenClaw.

The National Computer Network Emergency Response Technical Team/Coordination Center of China (CNCERT/CC) issued a security risk warning regarding OpenClaw applications. Previously, improper installation and use of OpenClaw agents had led to several serious security risks. CNCERT/CC recommends that relevant organizations and individual users take the following security measures when deploying and using OpenClaw: 1. Strengthen network control. Do not expose the OpenClaw default management port directly to the public internet. Manage access services securely through authentication, access control, and other security control measures. Strictly isolate the operating environment and use technologies such as containers to limit excessive OpenClaw privileges; 2. Strengthen credential management. Avoid storing keys in plaintext in environment variables. Establish a complete operation log auditing mechanism; 3. Strictly manage plugin sources. Disable automatic updates and only install signed and verified extensions from trusted channels; 4. Continuously monitor patches and security updates, and promptly update versions and install security patches. (Jinshi)