OpenClaw Security in 2026: CVEs, Malicious Skills, and the 30,000 Exposed Instances Problem

Somewhere right now, there are over 30,000 OpenClaw instances exposed to the public internet without authentication. No API key. No password. No access control of any kind. Just an autonomous AI agent with whatever permissions its owner configured, accessible to…








