OpenClaw AI agent security crisis — 138 CVEs in 63 days, 341 malicious marketplace skills
Date: 2026-02-01
Affected: OpenClaw — 21,000+ exposed instances; connected enterprise SaaS apps
Attack vector: rce
Category: real-world
Severity: Critical
CVE: CVE-2026-25253
CWE: CWE-669
CVSS:  (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

OpenClaw (135K+ GitHub stars) had over 138 CVEs in 63 days. CVE-2026-25253 (CVSS 8.8) enabled one-click RCE. Over 21,000 publicly exposed instances found. 341 malicious skills (~12% of ClawHub marketplace) performed credential theft and lateral movement across connected enterprise SaaS apps.

Impact: 138 CVEs; 341 malicious marketplace skills; credential theft at scale; enterprise lateral movement

Mitigations:
Agent framework security auditing
Marketplace skill vetting and signing
Network isolation for agent instances

Architectural layers (MAESTRO):
label: Agent Frameworks
notes: 138 CVEs in core framework; malicious skills in marketplace
role: origin
label: Agent Ecosystem
notes: 12% of marketplace skills are malicious
role: propagation
label: Deployment & Infrastructure
notes: 21,000 exposed instances; lateral movement to SaaS apps
role: impact