{
 "id": "AIR-2026-0343",
 "slug": "exposed-clawdbot-control-interfaces-lead-to-credential-acces",
 "title": "Exposed ClawdBot Control Interfaces Lead to Credential Access",
 "summary": "A researcher discovered hundreds of unauthenticated ClawdBot control interfaces exposed on the public internet. The exposure allowed unauthorized access to configuration files, credentials, and execution of assistant skills.",
 "type": "attack_on_ai",
 "categories": [
  "data_leak",
  "agent_hijack"
 ],
 "severity": 3,
 "targets": [
  "enterprise_deployment",
  "open_weight_model"
 ],
 "products": [
  "OpenClaw",
  "ClawdBot"
 ],
 "incident_date": "2026-01-25",
 "incident_date_precision": "day",
 "first_reported": "2026-02-06",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0048",
   "publisher": "MITRE ATLAS",
   "title": "Exposed ClawdBot Control Interfaces Leads to Credential Access and Execution",
   "published_at": "2026-02-06"
  },
  {
   "url": "https://github.com/openclaw/openclaw",
   "publisher": "GitHub",
   "title": "GitHub - openclaw/openclaw: Your own personal AI assistant. Any OS. Any Platform. The lobster way. GitHub",
   "published_at": "2026-02-06"
  },
  {
   "url": "https://shodan.io/search?query=Clawdbot+Control",
   "publisher": "shodan.io",
   "title": "Clawdbot Control - Shodan Search",
   "published_at": "2026-02-06"
  },
  {
   "url": "https://x.com/theonejvo/status/2015401219746128322",
   "publisher": "x.com",
   "title": "hacking clawdbot and eating lobster souls",
   "published_at": "2026-02-06"
  }
 ],
 "source_count": 4,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "clawdbot",
  "openclaw",
  "credential_access",
  "misconfiguration"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}