Agentic AI is growing rapidly, and so are the vulnerabilities | IBM

Agentic AI is growing rapidly and the volume of vulnerabilities exceeds traditional tracking. The number of OpenClaw disclosures is increasing faster than the CVE attribution process can keep up, leaving many vulnerabilities without CVE identifiers.

This is more than an administrative problem. Most patch management tools, compliance frameworks, and enterprise security systems rely heavily on CVE IDs to uncover risks and track remediation actions. If vulnerabilities are not assigned CVEs, they may not appear in dashboards, scanners, or automated reports. This makes them virtually invisible to many organizations.

Vulnerability disclosures are beginning to show their limitations, and agent AI systems like OpenClaw are showing how unprepared we are for this emerging class of security problems. We are running headlong into a new class of security problems, and the ecosystem is simply not designed to handle it. The traditional CVE allocation and enrichment process helps…