OpenClaw fixes 23 confirmed vulnerabilities after Trail of Bits audit

The local AI agent shipped fixes for two high-severity and 16 medium-severity flaws, many involving permissions lost between tasks.

By · Published

Primary source: OpenClaw Newsroom

Why it matters

OpenClaw gives agents access to messages, memory, files and host tools. Finding 23 confirmed flaws shows how easily authorization can break as agent work branches, moves or continues in the background.

A close-up view of a sleek, glowing technological core unit in a modern data facility, showing intricate internal components and secure connections.

Peter Steinberger (@steipete) built OpenClaw to give people an AI agent that runs on their own computers and acts across messages, memory, files and other tools. On September 21st, OpenClaw disclosed the results of a broad security audit that found 23 confirmed vulnerabilities in the permissions and data-handling machinery supporting that access.…

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.