OpenClaw Agent Configuration Poisoning via SOUL.md

Tim Peck@timpeck

•updated Apr 28, 2026•6•0•448

Detects modifications to the OpenClaw agent's SOUL.md file, which dictates the core behavior and instructions of the agent. Attackers exploit this by tampering with the file to persistently alter the agent's actions across all future sessions without needing traditional code execution, as seen in attacks against NVIDIA NemoClaw sandboxes.