PANews reported on March 31 that security firm CertiK released a security report titled "OpenClaw Security Report," which points out that OpenClaw's "strong capabilities + high privileges" architecture, which connects external input to a local high-privilege execution environment, exposes security boundary issues in complex deployments. The report states that from November 2025 to March 2026, over 280 GitHub security announcements and more than 100 CVEs were identified. The report recommends that developers strengthen sandboxing, permission inheritance, and plugin verification, and that users avoid public network exposure and adhere to the principle of least privilege.