OpenClaw made waves when it came out. It was all over the news with OpenAI even hiring its creator on its AI team. So, what is it? OpenClaw is an open source software that allows different AI components to talk to other applications. For example, it can connect an AI-model such as GPT-5 to a messaging app such as WhatsApp. The connection will allow the model to read messages and reply to these messages. Claude, Chat-GPT and Perplexity also allow connecting different apps such as WA or Google Drive. So, what is the difference? The difference is that OpenClaw runs locally. Locally i.e. on your computer.
Why run locally?
Running locally allows OpenClaw to save all the important data such as API keys (an alternative to passwords to authenticate), conversation history and other data on the computer itself. Unlike Perplexity or ChatGPT that would save the data on cloud. Plus, the user has complete access to their data without being mediated by any entity as the middleman.
What can it do?
OpenClaw can do anything that the AI model allows. Depending on the underlying model, it can manage files, schedule appointments, respond to customers etc.
What is a drawback?
A drawback for OpenClaw is that it requires a lot of compute. Compute is the capacity of the computer to execute tasks. Compute depends on the type of processor, amount of ram, the graphics cards etc. Personally, I found it quite resource heavy. Hopefully, it is optimised as it develops. But in its current state, it requires more that just a normal MacBook to function properly.
Areas of concern
One area of concern for OpenClaw is its privacy record. CVE-2026-24763, a bug found in OpenClaw that allows it to escape the Docker environment it runs in and access the system is still unresolved.
-
A Docker is say a box within the computer where only one software, in this case, OpenClaw is running. Within this box, OpenClaw can save files, access files and do anything. But it cannot do anything outside the box. Therefore, if it makes any catastrophic changes, the change only ruins the box not the whole computer. However, the bug allowed OpenClaw to escape this box and make changes to the computer.
-
Another common vulnerability that is present for all agentic softwares is skills. Skills are instructions that define what an agent should do when encountering a task. Think of it as a Standard Operating Procedure (SoP) or a runbook. Once the agent encounters a task, if it has a skill that tells it what to do, the agent does it. One way to exploit this feature is by writing skills that direct the agent to leak personal data or download malicious code. The solution is to write your own skills.