---
title: "AI TRENDS | High-Risk Vulnerability Discovered in OpenClaw Platform"
type: "News"
locale: "en"
url: "https://longbridge.com/en/news/281124568.md"
description: "A high-risk vulnerability has been discovered in the OpenClaw platform, affecting over 170,000 instances globally. Identified by the 360 Digital Security Group and confirmed by the CNNVD, the flaw allows attackers to bypass security controls through the MEDIA protocol. This vulnerability can lead to unauthorized access to sensitive server information, posing significant risks for cyber attacks."
datetime: "2026-03-31T04:53:33.000Z"
locales:
  - [zh-CN](https://longbridge.com/zh-CN/news/281124568.md)
  - [en](https://longbridge.com/en/news/281124568.md)
  - [zh-HK](https://longbridge.com/zh-HK/news/281124568.md)
---

# AI TRENDS | High-Risk Vulnerability Discovered in OpenClaw Platform

A high-risk vulnerability has been identified in the OpenClaw platform, according to PANews. The discovery was made by the 360 Digital Security Group, which developed the 360 Multi-Agent Collaborative Vulnerability Mining System. The flaw, known as the MEDIA protocol prompt injection bypass tool permission leak local file vulnerability, has been officially confirmed by the National Information Security Vulnerability Database (CNNVD). This vulnerability affects over 170,000 publicly accessible OpenClaw instances across more than 50 countries and regions worldwide. The core risk lies in the MEDIA protocol operating at the output post-processing layer, allowing attackers to bypass platform tool policy controls. Even if an agent disables all tool calls, attackers can exploit basic group chat member permissions to initiate attacks and directly steal sensitive server information, potentially leading to further cyber attacks.

### Related Stocks

- [601360.CN](https://longbridge.com/en/quote/601360.CN.md)
- [OpenAI.NA](https://longbridge.com/en/quote/OpenAI.NA.md)

## Related News & Research

- [The dream of serving ads to AI agents has hit a snag](https://longbridge.com/en/news/295689957.md)
- [These 40-something founders say they have something the AI kids don't](https://longbridge.com/en/news/295385596.md)
- [I build AI data centers. I want them to disappear from view.](https://longbridge.com/en/news/295319962.md)
- [A 'made with AI' label on Karoline Leavitt's departure message on X intensifies the AI watermark debate](https://longbridge.com/en/news/295735570.md)
- [Lessons From the AI Genius Who Tried to Outsmart the Market](https://longbridge.com/en/news/295301945.md)