The four OpenClaw vulnerabilities, collectively called “Claw Chain,” show why AI agent platforms must be secured as high-privilege execution environments, not treated like ordinary productivity tools. The flaws can be chained to move from sandboxed execution to sensitive data access, privilege escalation, and persistence, including sandbox bypasses in OpenShell, command allowlist bypass, and improper access control in the agent runtime.

This is especially concerning because the attacker can abuse the agent’s own privileges, making malicious activity appear similar to normal agent behavior. Organizations experimenting with AI agents should immediately update OpenClaw to version 2026.4.22 or later, restrict exposure, review installed plugins and prompts, limit filesystem and credential access, and monitor agent activity as closely as privileged admin tools. AI agents are not harmless assistants once they can read files, execute commands, schedule tasks, and modify configurations. At that point, they are basically junior sysadmins with hallucination risk and a larger blast radius, which is a sentence no CISO wanted to read in 2026.

Cybersecurity researchers have disclosed a set of four security flaws in OpenClaw that could be chained to achieve data theft, privilege escalation, and persistence. The vulnerabilities, collectively dubbed Claw Chain by Cyera, can permit an attacker to establish a foothold, expose sensitive data, and plant backdoors. A brief description of the flaws is below -

Source: Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence via The Hacker News — published 15 May 2026.