多所高校：严禁安装！“龙虾”概念股暴跌！

Core Viewpoint - OpenClaw, a software with significant security vulnerabilities, has prompted multiple universities in China to issue urgent notices prohibiting its installation and operation on campus devices and networks [1]. Group 1: Security Risks - The National Internet Emergency Center has issued a risk alert regarding OpenClaw, highlighting serious security risks due to improper installation and usage, including "prompt injection" risks, "misoperation" risks, and vulnerabilities related to functional plugins [4]. - The rapid iteration of the OpenClaw AI agent means that while updating to the latest version can fix known vulnerabilities, it does not eliminate all security risks. The software's characteristics, such as autonomous decision-making and resource invocation, combined with unclear trust boundaries, pose significant risks [8]. Group 2: Recommended Security Measures - The National Internet Emergency Center recommends that users implement several security measures when deploying OpenClaw, including enhancing network control by not exposing the default management port to the public internet and using strict access controls [5]. - Users should strengthen credential management by avoiding plaintext storage of keys in environment variables and establishing comprehensive operation log auditing mechanisms [6]. - It is advised to strictly manage plugin sources, disable automatic updates, and only install extensions from trusted channels that have been verified [7]. - Continuous monitoring for patches and security updates is essential, as timely version updates and security patch installations are critical for maintaining security [8]. Group 3: User Caution - Users, including government agencies and enterprises, are urged to exercise caution when using AI agents like OpenClaw. Any discovered vulnerabilities or security threats should be reported to the National Internet Security Threat and Vulnerability Information Sharing Platform for timely action [9].