OpenClaw 2.0 pours glitter on slow-burning security dumpster fire

OpenClaw has released its highly anticipated version 2.0 update, touted as the most significant change to date. This update aims to simplify the installation process and revamp its browser app into a more user-friendly experience. Community manager Hannes Rudolph emphasized that the update encompasses the entire OpenClaw system. While the installation and interface enhancements are notable, critics argue that the security updates in this release fall short of expectations.

OpenClaw is an open-source AI agent harness, enabling users to create their own AI agents and connect them to various apps and services. The software gained popularity due to its extensive capabilities but also exposed numerous security concerns due to its unrestrained automation. The new version aims to address installation ease and improve user experience by mimicking the familiar chat interfaces of popular AI services like ChatGPT, Claude, Gemini, or Perplexity.

In terms of security, OpenClaw's version 2.0 introduces a shared cloud sessions feature that allows multiple team members to interact with a single instance. However, the patch notes reveal that the shared session controls lack tenant isolation or a security boundary. Additionally, OpenClaw has introduced a new protected credentials feature that securely shares sensitive information with agents in shared environments.

However, it's essential to note that the Secret Store values are not encrypted at rest and depend on the filesystem permissions of OpenClaw's state directory. Overall, OpenClaw's version 2.0 release prioritizes user accessibility, but the security measures fall short of fully addressing concerns.