If you believe you've found a security issue in OpenCRAB, please report it privately.

• Email: security@illusionart.ai
• What to include: reproduction steps, impact assessment, and (if possible) a minimal PoC.

OpenCRAB is a project by illusionart AI Private Limited. There is no bug bounty program currently. Please still disclose responsibly so we can fix issues quickly. The best way to help the project right now is by sending PRs.

• Public Internet Exposure
• Using OpenCRAB in ways that the docs recommend not to
• Prompt injection attacks

For threat model + hardening guidance (including opencrab security audit --deep and --fix), see:

• https://docs.openclaw.ai/gateway/security

OpenCRAB's web interface is intended for local use only. Do not bind it to the public internet; it is not hardened for public exposure.

OpenCRAB requires Node.js 22.12.0 or later (LTS). This version includes important security patches:

• CVE-2025-59466: async_hooks DoS vulnerability
• CVE-2026-21636: Permission model bypass vulnerability

Verify your Node.js version:

node --version  # Should be v22.12.0 or later

When running OpenCRAB in Docker:

1. The official image runs as a non-root user (node) for reduced attack surface
2. Use --read-only flag when possible for additional filesystem protection
3. Limit container capabilities with --cap-drop=ALL

Example secure Docker run:

docker run --read-only --cap-drop=ALL \
  -v opencrab-data:/app/data \
  opencrab/opencrab:latest

This project uses detect-secrets for automated secret detection in CI/CD. See .detect-secrets.cfg for configuration and .secrets.baseline for the baseline.

Run locally:

pip install detect-secrets==1.5.0
detect-secrets scan --baseline .secrets.baseline