--- title: "OpenClaw at work: the real risks and a checklist" description: "CVE-2026-25253, malicious skills, exposed installs: what is documented about OpenClaw, and eight checks to run before allowing it in a small business." image: https://www.neuracloudconsulting.com/hubfs/alternativa-clawdbot-moltbot-agente-ia-neuracloud.webp --- [Skip to main content](https://www.neuracloudconsulting.com/en/blog/openclaw-business-risks#main-content) [![NeuraCloud Consulting logo - AI automation and voice agent agency for small businesses](https://www.neuracloudconsulting.com/hs-fs/hubfs/neuracloud-consulting-automatisation-ia-agents-vocaux.webp?width=160&height=60&name=neuracloud-consulting-automatisation-ia-agents-vocaux.webp) ![](https://www.neuracloudconsulting.com/hs-fs/hubfs/logo-neuracloud-consulting-automatisation-ia-mode-sombre.png?width=160&height=60&name=logo-neuracloud-consulting-automatisation-ia-mode-sombre.png)](https://www.neuracloudconsulting.com/en) - [Home](https://www.neuracloudconsulting.com/en) - [Solutions](https://www.neuracloudconsulting.com/en#solutions) - [Client projects](https://www.neuracloudconsulting.com/en/client-projects) - [Offers](https://www.neuracloudconsulting.com/en#offres) - [Blog](https://www.neuracloudconsulting.com/en/blog) - [About](https://www.neuracloudconsulting.com/en/about) [📈 Estimate your gains](https://www.neuracloudconsulting.com/en/process-automation-audit) [📈 Estimate your gains](https://www.neuracloudconsulting.com/en/process-automation-audit) [📈 Estimate your gains](https://www.neuracloudconsulting.com/en/process-automation-audit) # OpenClaw at work: the real risks and a checklist CVE-2026-25253, malicious skills, exposed installs: what is documented about OpenClaw, and eight checks to run before allowing it in a small business. Jonathan Giordano Oct 19, 2026 --- Someone on your team may have installed OpenClaw already. It is an open-source AI agent that has been very popular since early 2026. It reads files, runs commands and answers from a messaging app. That access is its strength, and its risk. Here is what is **documented**, and what I would check before allowing it. ## Three documented risks ### A flaw that stole access in one click In late January 2026, a vulnerability was published as CVE-2026-25253. It is rated 8.8 out of 10. A booby-trapped link was enough to send the agent's access token to an attacker. With that token, the attacker could change settings and run commands. It even affected installs limited to the local machine. The victim's own browser opened the connection. It has been fixed since version **2026.1.29**, released on 30 January 2026. Any older version should be updated right away. ### Malicious skills on the marketplace OpenClaw gains "skills" that the community publishes on ClawHub. Koi Security found 341 malicious ones, most tied to a single campaign. Snyk analysed 3,984 skills in early February 2026. Its researchers confirmed 76 malicious payloads. ClawHub then added automatic scanning of new uploads. It is not enough. Between February and May 2026, Unit 42 still found five malicious skills that were not blocked. Two installed software that steals credentials on a Mac. Another padded its documentation to 22 MB to slip past scanners. ### Installs left open to the internet Several public scans have counted tens of thousands of instances reachable from the internet. The numbers vary with the method, but the order of magnitude holds. I was one of them. During an audit of my server, I found my install more exposed than it should have been. I shut it down. ## The risk people forget: the agent inherits your rights An agent acts with whatever access you give it. If it reads your mailbox, a booby-trapped email can give it instructions. If it holds your credentials, a malicious skill holds them too. No update fixes this risk. You reduce it by granting **as little access as possible**. ## The checklist Before allowing OpenClaw, or any general-purpose agent, I would check these eight points. - Inventory: know who installed it, on which computer or server. - Version: 2026.1.29 at least, and ideally the latest release. - Exposure: the control panel listens on the local machine only. Remote access goes through a private network or a tunnel. - Authentication: switched on, with a long token, rotated if the agent ever ran a vulnerable version. - Skills: nothing installed from ClawHub without reading the code and checking the publisher. - Isolation: the agent runs in a container or a dedicated machine, under an unprivileged account. - Access: tokens of its own, limited to what it strictly needs. Never your personal credentials. - Monitoring: the agent's outbound connections are logged and reviewed. If nobody on your team can keep up **these eight points over time**, do not use a general-purpose agent. The hard part is the time they take, every single week. ## What to do instead For a specific task, a narrow agent is often enough. It works inside your current tools, with only the access its task needs. I compared five options in [OpenClaw alternatives: 5 options for small businesses](https://www.neuracloudconsulting.com/en/clawdbot-openclaw-alternative). If you want an outside look at an agent already running in your company, [the audit is free](https://www.neuracloudconsulting.com/en/process-automation-audit). ## Sources - [Security advisory CVE-2026-25253 (GHSA-g8p2-7wf7-98mq), OSV database](https://api.osv.dev/v1/vulns/CVE-2026-25253) - [The Hacker News, February 2026](https://thehackernews.com/2026/02/openclaw-bug-enables-one-click-remote.html) - [Snyk, ToxicSkills study, 5 February 2026](https://snyk.io/blog/toxicskills-malicious-ai-agent-skills-clawhub/) - [Unit 42 (Palo Alto Networks), 23 June 2026, with the Koi Security count](https://unit42.paloaltonetworks.com/openclaw-ai-supply-chain-risk/) - [Exposed-instance counts, summary](https://blog.cyberdesserts.com/openclaw-exposure-numbers-explained.md) ## Related articles Practical advice ### [AI & Sales: automate your prospecting without losing the human touch](https://www.neuracloudconsulting.com/en/blog/ai-sales-prospecting-small-business) Jonathan Giordano Oct 16, 2026 Automation ### [Automation & AI for small businesses: more productivity without coding](https://www.neuracloudconsulting.com/en/blog/ai-process-automation-small-business) Jonathan Giordano Oct 16, 2026 ### [How to automate customer payment reminders in a small business](https://www.neuracloudconsulting.com/en/blog/automate-customer-payment-reminders-small-business) Jonathan Giordano Oct 16, 2026 [![NeuraCloud Consulting logo - AI automation and voice agent agency for small businesses](https://www.neuracloudconsulting.com/hs-fs/hubfs/logo-neuracloud-consulting-automatisation-ia-mode-sombre.png?width=160&height=60&name=logo-neuracloud-consulting-automatisation-ia-mode-sombre.png)](https://www.neuracloudconsulting.com/en) AI-driven automation and process optimisation for small and mid-sized businesses. Fewer repetitive tasks. Fewer errors. More time for your growth. ### INFO - [contact@neuracloudconsulting.com](mailto:contact@neuracloudconsulting.com) - [+33 6 73 94 19 34](tel:+33673941934) - [WhatsApp](https://wa.me/33673941934?text=I%20would%20like%20to%20know%20more%20about%20your%20services) - Benalmádena (Málaga), Spain ### NAVIGATION - [Home](https://www.neuracloudconsulting.com/en) - [Solutions](https://www.neuracloudconsulting.com/en#solutions) - [Offers](https://www.neuracloudconsulting.com/en#offres) - [Client projects](https://www.neuracloudconsulting.com/en/client-projects) - [About](https://www.neuracloudconsulting.com/en/about) - [Contact](https://www.neuracloudconsulting.com/en/contact) ### SOLUTIONS - [Process automation](https://www.neuracloudconsulting.com/en#solutions) - [AI voice agents](https://www.neuracloudconsulting.com/en/ai-voice-agents-switchboard) - [Customer service automation](https://www.neuracloudconsulting.com/en/customer-service-automation) - [Accounts receivable automation](https://www.neuracloudconsulting.com/en/accounts-receivable-automation) - [Clawdbot alternative](https://www.neuracloudconsulting.com/en/clawdbot-openclaw-alternative) ### RESOURCES - [Blog](https://www.neuracloudconsulting.com/en/blog) - [ROI calculator](https://www.neuracloudconsulting.com/en/automation-roi-calculator) - [FAQ](https://www.neuracloudconsulting.com/en#faq-home-trigger--1) - [Book a free diagnostic](https://www.neuracloudconsulting.com/en/process-automation-audit) ### INTEGRATIONS - [Pennylane](https://www.neuracloudconsulting.com/en/pennylane-automation) - [HubSpot](https://www.neuracloudconsulting.com/en/hubspot-automation) - [OfficeRnD](https://www.neuracloudconsulting.com/en/officernd-automation) - [Google Workspace](https://www.neuracloudconsulting.com/en/google-workspace-automation) ### Stay in the loop Occasional practical tips on automation, AI and tools for small and mid-sized businesses. Email address for the newsletter Sign up I agree to receive the NeuraCloud Consulting newsletter. © 2026 NeuraCloud Consulting. All rights reserved. A website designed by a human, assisted by AI, and refined with a great deal of patience 😉. [Legal Notice](https://www.neuracloudconsulting.com/en/legal-notice)| [Privacy Policy](https://www.neuracloudconsulting.com/en/privacy-policy)| [Terms of Sale](https://www.neuracloudconsulting.com/en/terms-of-sale)| Cookie settings ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Jonathan Giordano", "url" : "https://www.neuracloudconsulting.com/en/blog/author/jonathan-giordano" }, "dateModified" : "2026-10-19T10:12:55.031Z", "datePublished" : "2026-10-19T10:13:00.000Z", "headline" : "OpenClaw at work: the real risks and a checklist", "image" : [ "https://www.neuracloudconsulting.com/hubfs/alternativa-clawdbot-moltbot-agente-ia-neuracloud.webp" ], "mainEntityOfPage" : { "@id" : "https://www.neuracloudconsulting.com/en/blog/openclaw-business-risks", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.neuracloudconsulting.com/hubfs/neuracloud-consulting-automatisation-ia-agents-vocaux.webp" }, "name" : "NeuraCloud Consulting" } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.neuracloudconsulting.com/#website", "@type" : "WebSite", "description" : "Automation, Cloud and Artificial Intelligence agency for small and mid-sized businesses.", "inLanguage" : "en-GB", "name" : "NeuraCloud", "potentialAction" : { "@type" : "SearchAction", "query-input" : "required name=search_term_string", "target" : "https://www.neuracloudconsulting.com/?s={search_term_string}" }, "publisher" : { "@id" : "https://www.neuracloudconsulting.com/#organization" }, "url" : "https://www.neuracloudconsulting.com/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.neuracloudconsulting.com/#organization", "@type" : [ "LocalBusiness", "Organization" ], "address" : { "@type" : "PostalAddress", "addressCountry" : "ES", "addressLocality" : "Benalmádena", "postalCode" : "29630", "streetAddress" : "Calle Florencia 1, B2, 2A" }, "alternateName" : "NeuraCloud Consulting", "areaServed" : [ "FR", "ES", "CH", "BE", "CA" ], "contactPoint" : [ { "@type" : "ContactPoint", "areaServed" : "FR", "availableLanguage" : [ "French", "Spanish" ], "contactType" : "sales", "telephone" : "+33673941934" }, { "@type" : "ContactPoint", "areaServed" : "ES", "availableLanguage" : [ "Spanish", "French" ], "contactType" : "sales", "telephone" : "+34672359500" } ], "description" : "Automation, digitalisation and AI specialists for small and mid-sized businesses.", "founder" : { "@id" : "https://www.neuracloudconsulting.com/#jonathan-giordano" }, "geo" : { "@type" : "GeoCoordinates", "latitude" : 36.587883, "longitude" : -4.536066 }, "hasOfferCatalog" : { "@type" : "OfferCatalog", "itemListElement" : [ { "@type" : "Offer", "itemOffered" : { "@type" : "Service", "description" : "Free diagnostic, then an audit of the business processes to automate, with a prioritised action plan.", "name" : "Process Automation Audit" }, "url" : "https://www.neuracloudconsulting.com/en/process-automation-audit" }, { "@type" : "Offer", "availability" : "https://schema.org/InStock", "itemOffered" : { "@type" : "Service", "description" : "AI voice assistant for handling inbound calls.", "name" : "AI Voice Agent Deployment" } } ], "name" : "Automation & AI Services" }, "image" : "https://www.neuracloudconsulting.com/hs-fs/hubfs/neuracloud-consulting-automatisation-ia-agents-vocaux.webp", "knowsAbout" : [ "Automatisation", "IA", "n8n", "Make", "HubSpot", "CRM", "Cloud Computing", "Agent Vocal" ], "legalName" : "NEURACLOUD CONSULTING S.L.", "logo" : "https://www.neuracloudconsulting.com/hs-fs/hubfs/neuracloud-consulting-automatisation-ia-agents-vocaux.webp", "name" : "NeuraCloud", "openingHoursSpecification" : [ { "@type" : "OpeningHoursSpecification", "closes" : "18:30", "dayOfWeek" : [ "Monday", "Tuesday", "Wednesday", "Thursday" ], "opens" : "09:30" }, { "@type" : "OpeningHoursSpecification", "closes" : "17:00", "dayOfWeek" : "Friday", "opens" : "09:30" } ], "potentialAction" : { "@type" : "ReserveAction", "result" : { "@type" : "Reservation", "name" : "Book an Audit" }, "target" : { "@type" : "EntryPoint", "actionPlatform" : [ "http://schema.org/DesktopWebPlatform", "http://schema.org/MobileWebPlatform" ], "urlTemplate" : "https://www.neuracloudconsulting.com/meetings/jgiordano" } }, "priceRange" : "$$", "sameAs" : [ "https://www.linkedin.com/company/neuracloudconsulting", "https://www.instagram.com/neura.cloud/", "https://www.facebook.com/neuracloudconsulting" ], "telephone" : "+33673941934", "url" : "https://www.neuracloudconsulting.com" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.neuracloudconsulting.com/#jonathan-giordano", "@type" : "Person", "jobTitle" : "Founder", "name" : "Jonathan Giordano", "sameAs" : [ "https://www.linkedin.com/in/jonathangiordano" ], "worksFor" : { "@id" : "https://www.neuracloudconsulting.com/#organization" } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://www.neuracloudconsulting.com/en/blog/openclaw-business-risks#webpage", "@type" : "WebPage", "dateModified" : "2026-10-19", "datePublished" : "2026-10-19", "inLanguage" : "en-GB", "isPartOf" : { "@id" : "https://www.neuracloudconsulting.com/#website" }, "name" : "OpenClaw at work: the real risks and a checklist", "url" : "https://www.neuracloudconsulting.com/en/blog/openclaw-business-risks" } ``` ```json { "@context" : "https://schema.org", "@type" : "BreadcrumbList", "itemListElement" : [ { "@type" : "ListItem", "item" : "https://www.neuracloudconsulting.com/en", "name" : "Home", "position" : 1 }, { "@type" : "ListItem", "item" : "https://www.neuracloudconsulting.com/fr/blog", "name" : "Blog", "position" : 2 }, { "@type" : "ListItem", "item" : "https://www.neuracloudconsulting.com/en/blog/openclaw-business-risks", "name" : "OpenClaw at work: the real risks and a checklist", "position" : 3 } ] } ```