OpenClaw

March 31, 2026 – Recently, 360 Digital Security Group’s self-developed 360 Multi-Agent Collaborative Vulnerability Mining System has made a significant discovery on the OpenClaw platform. A high-risk vulnerability, namely the MEDIA Protocol Prompt Injection that bypasses tool permissions, has been identified, which can lead to the leakage of local files. This vulnerability has been officially…