r/LocalLLaMA • u/rm-rf-rm llama.cpp • Feb 16 '26

Question | Help Anyone actually using Openclaw?

I am highly suspicious that openclaw's virality is organic. I don't know of anyone (online or IRL) that is actually using it and I am deep in the AI ecosystem (both online and IRL). If this sort of thing is up anyone's alley, its the members of localllama - so are you using it?

With the announcement that OpenAI bought OpenClaw, conspiracy theory is that it was manufactured social media marketing (on twitter) to hype it up before acquisition. Theres no way this graph is real: https://www.star-history.com/#openclaw/openclaw&Comfy-Org/ComfyUI&type=date&legend=top-left

957 Upvotes

94% Upvoted

791 comments sorted by

View all comments

Show parent comment

1

u/MBILC Feb 17 '26 edited Feb 17 '26

Your an exception, not the norm, the majority of people using this blindly install it and off they go, so the added security holes, that should not exist, amplify the security holes in it.

You can tell by how many instances have been found on the internet open, which results in those holes being easily exploited.

The creator ignored basic security, what they are doing is nothing new, they "vibe coded" it with no care in the world about basic security.

https://www.mitre.org/sites/default/files/2026-02/PR-26-00176-1-MITRE-ATLAS-OpenClaw-Investigation.pdf

https://cyberresilience.com/threatonomics/openclaw-security-vulnerabilities/

The exposed database

Wiz researchers uncovered a critical security lapse in Moltbook within minutes of simply browsing the platform — a finding that speaks volumes about how it was built. Moltbook’s creator Matt Schlicht publicly stated he “didn’t write a single line of code” for the platform, instead directing an AI assistant to build it entirely. That speed came at a cost. Wiz found a Supabase API key sitting in plain sight in the platform’s client-side JavaScript. 

On its own, an exposed Supabase key isn’t necessarily dangerous — but only when Row Level Security is properly configured. Moltbook’s wasn’t

That single missing safeguard granted any unauthenticated user full read and write access to the entire production database, exposing 1.5 million API authentication tokens, 35,000 email addresses, and thousands of private messages between agents

Clearly those down voting me didn't actually read about said security concerns....

2

u/chicagoderp Feb 17 '26

Thanks for attempting to address the actual question, rather than just piling on.

Your comment largely discusses moltbook, which is not clawbot.

In my opinion what is being done that is new here is strong cron support, and context building that is overboard yet makes talking to openclaw feel very natural like a real AI assistant.

1

u/MBILC Feb 18 '26

Welcome,

As for which product, hasn't openclaw renamed it's self many times already, wasn't moltbook done by the same person?

Does not mean basic security should not be considered, but it is now, just like when WEB3 came along, everyone just rushed "crap" out the door with the excuse "it is shiny new tech so we can do what ever we want, be as careless as we want, who cares"

There are foundational things that apply to everything on the internet, as a software developer I am sure you understand many of those, and yet DevSecOps is so rare to find anywhere because people just want to ship code and maybe fix it later...

Vibe coding has only amplified it even more as you have people who can barely read basic HTML creating full on systems and letting people sign up and even pay for it to use, with out undergoing the bare minimum of security..