
OpenClaw gives an AI agent access to your files, email, calendar, and command line, running around the clock without waiting to be asked. That's a useful setup for a lot of professionals. It's also a significant amount of trust to place in software that launched in late 2025 and is still patching security holes.
We've gone through the research, CVE disclosures, and security audits published since OpenClaw went viral. Here's what you should know before you hand it access to anything that matters.