The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Tens of thousands of OpenClaw AI agent systems were found exposed to the internet due to misconfigurations and software vulnerabilities, allowing attackers to gain unauthorized access and control. Security researchers confirmed active exploitation, leading to data breaches and system takeovers across multiple countries.[AI generated]
Why's our monitor labelling this an incident or hazard?
OpenClaw is an AI system that autonomously acts on behalf of users with broad access to sensitive resources. The article details how security researchers demonstrated remote compromise and how attackers exploited these vulnerabilities to steal credentials and distribute malware. These are direct harms to property and potentially to individuals and organizations, fitting the definition of an AI Incident. The article also discusses the rapid timeline from vulnerability disclosure to exploitation, confirming that harm has already occurred. Therefore, this event qualifies as an AI Incident due to the realized security breaches and harms caused by the AI system's use and malfunction.[AI generated]