Exposed ClawdBot Control Interfaces Lead to Credential Access

# Exposed ClawdBot Control Interfaces Lead to Credential Access

https://gcdradar.vercel.app/incidents/exposed-clawdbot-control-interfaces-lead-to-credential-acces · AIR-2026-0343 · closed 2026-02-20

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2026-02-06 (happened 2026-01-25)
- AI role: Attack on AI
- Products: OpenClaw, ClawdBot

## Summary

A researcher discovered hundreds of unauthenticated ClawdBot control interfaces exposed on the public internet. The exposure allowed unauthorized access to configuration files, credentials, and execution of assistant skills.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-02-06: hacking clawdbot and eating lobster souls (https://x.com/theonejvo/status/2015401219746128322)
- 2026-02-06: Clawdbot Control - Shodan Search (https://shodan.io/search?query=Clawdbot+Control)
- 2026-02-06: GitHub - openclaw/openclaw: Your own personal AI assistant. Any OS. Any Platform. The lobster way. GitHub (https://github.com/openclaw/openclaw)
- 2026-02-06: Exposed ClawdBot Control Interfaces Leads to Credential Access and Execution (https://atlas.mitre.org/studies/AML.CS0048)

## Sources

- 2026-02-06 MITRE ATLAS: Exposed ClawdBot Control Interfaces Leads to Credential Access and Execution https://atlas.mitre.org/studies/AML.CS0048
- 2026-02-06 GitHub: GitHub - openclaw/openclaw: Your own personal AI assistant. Any OS. Any Platform. The lobster way. GitHub https://github.com/openclaw/openclaw
- 2026-02-06 shodan.io: Clawdbot Control - Shodan Search https://shodan.io/search?query=Clawdbot+Control
- 2026-02-06 x.com: hacking clawdbot and eating lobster souls https://x.com/theonejvo/status/2015401219746128322

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.