Topic starter
12/07/2026 12:21 pm
TL;DR: Tens of thousands of exposed OpenClaw instances were found, with 35.4% flagged vulnerable, and attackers can abuse those services for remote code execution, infrastructure misuse, botnets, and crypto mining when agent permissions are broad, according to SecurityScorecard’s STRIKE team. The real issue is not autonomy, but exposed access and weak guardrails that turn agentic tools into additional identities inside the environment.
Editorial analysis by NHI Mgmt Group, based on content published by SecurityScorecard: “How Exposed OpenClaw Deployments Turn Agentic AI Into an Attack Surface”.
By the numbers:
- 35.4% of observed OpenClaw deployments were flagged as vulnerable at time of writing.
Key questions
Q: What breaks when AI agents are given broad inherited permissions?
A: Broad inherited permissions break the assumption that access is tied to a narrow business need.
Q: Why do exposed agentic AI deployments create more risk than ordinary web services?
A: They create more risk because the service is not just serving traffic, it is acting across systems on behalf of users or workflows.
Q: How do security teams know whether an agent gateway is overexposed?
A: Look for methods that reveal configuration, session content, or connected infrastructure from the same control plane that processes user commands.
Practitioner guidance
- Inventory every exposed agentic deployment Track where OpenClaw or similar tools are running, what interfaces are public, and which teams own the deployment.
- Reduce agent privilege to the minimum viable scope Strip email, API, cloud, and file permissions that are not required for the specific task set.
- Isolate agent runtimes from sensitive credentials Run agents in segmented environments so a compromise does not immediately expose secrets, tokens, or control-plane access.
Bottom line: Exposed agentic AI deployments create an identity and access problem because they inherit whatever permissions the agent already has.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
12/07/2026 12:35 pm
Agentic exposure is an identity design problem before it is an AI problem: The article shows that OpenClaw risk comes from reachable services with real authority, not from autonomy narratives. That means the security boundary is where the agent can act, what it can reach, and how much privilege it carries. Practitioners should read this as a governance failure in exposed access, not as a debate about model intelligence.
A few things that frame the scale:
- 53% of security leaders expect AI to run major portions of their infrastructure autonomously within the next three years, according to the 2026 Infrastructure Identity Survey.
- 69% of security leaders agree identity management must fundamentally shift to address agentic AI systems, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: Should organisations treat AI as an application or as an identity?
A: Treat it as an identity when the AI can access data, invoke tools, or participate in workflows that affect business systems. That framing makes least privilege, just-in-time access, and lifecycle governance relevant. If you keep treating it only as an application, you will miss the access and delegation behaviours that actually create risk.
👉 Read our full editorial: OpenClaw exposures expose the identity gap in agentic AI security