<![CDATA[OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/]]>OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/

That's... wow. New high score!

]]>https://board.circlewithadot.net/topic/72bdbc2b-389d-48d4-8e48-23e03042a938/openclaw-is-averaging-1.8-cves-per-day-https-days-since-openclaw-cve.comRSS for NodeFri, 01 May 2026 10:20:43 GMTSat, 04 Apr 2026 15:46:18 GMT60<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 19:22:02 GMT]]>@cwebber I doubt they update frequently, so you can even try some quite old CVEs against them!

]]>https://board.circlewithadot.net/post/https://tech.lgbt/users/solonovamax/statuses/116348061130804664https://board.circlewithadot.net/post/https://tech.lgbt/users/solonovamax/statuses/116348061130804664Sat, 04 Apr 2026 19:22:02 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 19:08:43 GMT]]>@cwebber why bother exploiting the program when i can ask the Aiagent to please hand over all the keys and password

]]>https://board.circlewithadot.net/post/https://cailincat.cloud/users/lunathemoongirl/statuses/116348008736307898https://board.circlewithadot.net/post/https://cailincat.cloud/users/lunathemoongirl/statuses/116348008736307898Sat, 04 Apr 2026 19:08:43 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 19:05:31 GMT]]>@lunathemoongirl Indeed, OpenClaw is a CVE

]]>https://board.circlewithadot.net/post/https://social.coop/users/cwebber/statuses/116347996164279172https://board.circlewithadot.net/post/https://social.coop/users/cwebber/statuses/116347996164279172Sat, 04 Apr 2026 19:05:31 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 19:05:07 GMT]]>@cwebber I mean you could make an argument that the CVE s dont matter given the target audience of openclaw

]]>https://board.circlewithadot.net/post/https://cailincat.cloud/users/lunathemoongirl/statuses/116347994599186043https://board.circlewithadot.net/post/https://cailincat.cloud/users/lunathemoongirl/statuses/116347994599186043Sat, 04 Apr 2026 19:05:07 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 18:09:23 GMT]]>@phl @cwebber i can't bring myself to watch it because the voice is so annoying

]]>https://board.circlewithadot.net/post/https://solarpunk.moe/users/vv/statuses/116347775418563141https://board.circlewithadot.net/post/https://solarpunk.moe/users/vv/statuses/116347775418563141Sat, 04 Apr 2026 18:09:23 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 18:00:13 GMT]]>@cwebber Everybody: AI can’t find CVEs
OpenClaw: Bet

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/ckure/statuses/116347739436514421https://board.circlewithadot.net/post/https://infosec.exchange/users/ckure/statuses/116347739436514421Sat, 04 Apr 2026 18:00:13 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 17:57:39 GMT]]>@vv @cwebber It lives rent free in our heads all these years later πŸ˜„

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/phl/statuses/116347729325831762https://board.circlewithadot.net/post/https://mastodon.social/users/phl/statuses/116347729325831762Sat, 04 Apr 2026 17:57:39 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 17:55:08 GMT]]>@cwebber CVE as a service

]]>https://board.circlewithadot.net/post/https://mementomori.social/users/Turre/statuses/116347719441080409https://board.circlewithadot.net/post/https://mementomori.social/users/Turre/statuses/116347719441080409Sat, 04 Apr 2026 17:55:08 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 17:49:47 GMT]]>@phl @cwebber yep, this is what i was thinking of, haha

]]>https://board.circlewithadot.net/post/https://solarpunk.moe/users/vv/statuses/116347698376331452https://board.circlewithadot.net/post/https://solarpunk.moe/users/vv/statuses/116347698376331452Sat, 04 Apr 2026 17:49:47 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 17:45:53 GMT]]>@cwebber

Link Preview Image
]]>https://board.circlewithadot.net/post/https://todon.eu/ap/users/115601049471092408/statuses/116347683034277717https://board.circlewithadot.net/post/https://todon.eu/ap/users/115601049471092408/statuses/116347683034277717Sat, 04 Apr 2026 17:45:53 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 17:41:41 GMT]]>@vv @cwebber I thought webscale was the unsightly crusty build-up on the inside of the intertubes.

]]>https://board.circlewithadot.net/post/https://mstdn.social/users/darkling/statuses/116347666549381843https://board.circlewithadot.net/post/https://mstdn.social/users/darkling/statuses/116347666549381843Sat, 04 Apr 2026 17:41:41 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 17:29:01 GMT]]>@shansterable @cwebber Thank you!

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/ThanatoidJones/statuses/116347616748564690https://board.circlewithadot.net/post/https://mastodon.social/users/ThanatoidJones/statuses/116347616748564690Sat, 04 Apr 2026 17:29:01 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 17:23:32 GMT]]>@vv @cwebber https://tenor.com/h1iAp0cylbl.gif

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/phl/statuses/116347595152070028https://board.circlewithadot.net/post/https://mastodon.social/users/phl/statuses/116347595152070028Sat, 04 Apr 2026 17:23:32 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 17:12:38 GMT]]>@cwebber
CVE = Common Vulnerabilities and Exposures, in case that helps anyone else besides me

I try to do for initialisms and acronyms what alt text does for images.

Wikipedia: "The Common Vulnerabilities and Exposures (CVE) system, originally Common Vulnerability Enumeration, provides a reference method for publicly known information-security vulnerabilities and exposures."

]]>https://board.circlewithadot.net/post/https://ohai.social/users/shansterable/statuses/116347552314323425https://board.circlewithadot.net/post/https://ohai.social/users/shansterable/statuses/116347552314323425Sat, 04 Apr 2026 17:12:38 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 16:52:02 GMT]]>@cwebber
OpenClaw is averaging 1.8 CVEs *PER DAY*... since day 1, i.e. November 2025, wow!

They must be popular to have so many security researchers check them out πŸ€“

]]>https://board.circlewithadot.net/post/https://c.im/users/maol/statuses/116347471327487192https://board.circlewithadot.net/post/https://c.im/users/maol/statuses/116347471327487192Sat, 04 Apr 2026 16:52:02 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 16:34:04 GMT]]>@cwebber the more CVEs a project has, the more Web Scale it is

]]>https://board.circlewithadot.net/post/https://solarpunk.moe/users/vv/statuses/116347400626284155https://board.circlewithadot.net/post/https://solarpunk.moe/users/vv/statuses/116347400626284155Sat, 04 Apr 2026 16:34:04 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 16:27:11 GMT]]>@cwebber

Is it a crime to hack instances in a country you're at war with?

Some of those openclaw agents were in Russia.

]]>https://board.circlewithadot.net/post/https://timeloop.cafe/users/alienghic/statuses/116347373566172212https://board.circlewithadot.net/post/https://timeloop.cafe/users/alienghic/statuses/116347373566172212Sat, 04 Apr 2026 16:27:11 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 16:02:25 GMT]]>@cwebber number go up!

]]>https://board.circlewithadot.net/post/https://hci.social/users/simulo/statuses/116347276165314538https://board.circlewithadot.net/post/https://hci.social/users/simulo/statuses/116347276165314538Sat, 04 Apr 2026 16:02:25 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 15:54:23 GMT]]>@cwebber honestly, at this point i expect openclaw servers to get automatically hacked within minutes, the same way you couldn't let a windows xp sp1 machine online without having it subjected to either the malware that knocked down a system service and forced your machine to shut down after a minute or the malware that knocked down a system service and caused weird bugs to happen

]]>https://board.circlewithadot.net/post/https://toot.cat/users/rnd/statuses/116347244631607412https://board.circlewithadot.net/post/https://toot.cat/users/rnd/statuses/116347244631607412Sat, 04 Apr 2026 15:54:23 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 15:49:51 GMT]]>By the way, I encourage browsing through the CVEs reported https://nvd.nist.gov/vuln/search#/nvd/home?keyword=openclaw&resultType=records

These are by and large not minor CVEs.

]]>https://board.circlewithadot.net/post/https://social.coop/users/cwebber/statuses/116347226776009261https://board.circlewithadot.net/post/https://social.coop/users/cwebber/statuses/116347226776009261Sat, 04 Apr 2026 15:49:51 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 15:49:02 GMT]]>OpenClaw also got a terrifying privilege escalation vulnerability https://nvd.nist.gov/vuln/detail/CVE-2026-33579

Meanwhile the OpenClaw founder is claiming shush, it's no big deal, probably most of these aren't really exploitable! (There's good business interest reasons to argue that, since OpenClaw's founders got acquired by OpenAI) https://news.ycombinator.com/item?id=47629849

Okay. I know I have more than a few security researchers following me. There's a public list of literally hundreds of thousands of publicly accessible OpenClaw instances right here: https://openclaw.allegro.earth/

Anyone try taking a sampling of them and testing how vulnerable against recent escalation CVEs they are? Could be a rather juicy writeup!

]]>https://board.circlewithadot.net/post/https://social.coop/users/cwebber/statuses/116347223545771008https://board.circlewithadot.net/post/https://social.coop/users/cwebber/statuses/116347223545771008Sat, 04 Apr 2026 15:49:02 GMT<![CDATA[Reply to OpenClaw is averaging 1.8 CVEs *PER DAY* https://days-since-openclaw-cve.com/ on Sat, 04 Apr 2026 15:48:39 GMT]]>@cwebber Wow, now that's LLMs being productive!]]>https://board.circlewithadot.net/post/https://queer.hacktivis.me/objects/97a7ccf3-7a19-466b-9e9d-5498a6423ab4https://board.circlewithadot.net/post/https://queer.hacktivis.me/objects/97a7ccf3-7a19-466b-9e9d-5498a6423ab4Sat, 04 Apr 2026 15:48:39 GMT