AWS launched managed OpenClaw on Lightsail for AI agent deployment while security concerns mount. The 250k-star GitHub project is affected by CVE-2026-25253, which enables one-click RCE, with 17,500+ ...
Discover the best software development firms for fintech in Europe in 2026. Compare pricing, compliance expertise, tech stacks, and deployment speed.
2026年3月,被誉为"增长最快的开源AI Agent项目"的OpenClaw遭遇严峻安全考验。安全研究者在短时间内追踪到针对其用户的全链条攻击矩阵:攻击者通过NPM恶意依赖包、伪造GitHub组件仓库实施供应链投毒,并利用认证控制逻辑缺陷完成渗透。这一系列结构化攻击表明,针对OpenClaw的常态化、低门槛渗透能力已形成。