The OpenClaw crisis is the first documented case of an open-source AI agent framework triggering a multi-vector enterprise threat through a combination of rapid viral adoption and absent security architecture. Three critical CVEs disclosed against it by February 2026, a supply chain attack on its skill marketplace, and mass data exposure together establish a threat profile that no prior open-source AI incident had assembled in a single project. Enterprise security teams now have a named precedent — not a hypothetical — to anchor their AI agent procurement policies around. The…