{"id":10537,"date":"2026-07-13T22:21:00","date_gmt":"2026-07-14T02:21:00","guid":{"rendered":"https:\/\/masquedigital.com\/?p=10537"},"modified":"2026-07-25T22:33:15","modified_gmt":"2026-07-26T02:33:15","slug":"vulnerabilidades-en-asistente-de-ia-openclaw","status":"publish","type":"post","link":"https:\/\/masquedigital.com\/en\/noti-tips\/vulnerabilidades-en-asistente-de-ia-openclaw\/","title":{"rendered":"Vulnerabilidades en asistente de IA OpenClaw"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Tres fallos de seguridad corregidos en el asistente OpenClaw permit\u00edan ejecutar c\u00f3digo arbitrario y robar credenciales del sistema anfitri\u00f3n. Un investigador demostr\u00f3 que la cadena de ataque pod\u00eda activarse externamente mediante un simple mensaje de WhatsApp.<\/p>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"435\" height=\"238\" src=\"https:\/\/masquedigital.com\/wp-content\/uploads\/2026\/07\/image-20.png\" alt=\"\" class=\"wp-image-10542\" srcset=\"https:\/\/masquedigital.com\/wp-content\/uploads\/2026\/07\/image-20.png 435w, https:\/\/masquedigital.com\/wp-content\/uploads\/2026\/07\/image-20-300x164.png 300w, https:\/\/masquedigital.com\/wp-content\/uploads\/2026\/07\/image-20-18x10.png 18w\" sizes=\"auto, (max-width: 435px) 100vw, 435px\" \/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_82_1 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Tabla de Contenidos<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewbox=\"0 0 24 24\" version=\"1.2\" baseprofile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/masquedigital.com\/en\/noti-tips\/vulnerabilidades-en-asistente-de-ia-openclaw\/#El_engano_a_los_agentes_de_IA_de_seguridad\" >El enga\u00f1o a los agentes de IA de seguridad<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/masquedigital.com\/en\/noti-tips\/vulnerabilidades-en-asistente-de-ia-openclaw\/#Bypass_de_seguridad_en_GitHub_Copilot\" >Bypass de seguridad en GitHub Copilot<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"El_engano_a_los_agentes_de_IA_de_seguridad\"><\/span><strong>El enga\u00f1o a los agentes de IA de seguridad<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Investigadores desarrollaron un ataque llamado \u00abFriendly Fire\u00bb, que demuestra c\u00f3mo los asistentes aut\u00f3nomos de codificaci\u00f3n de OpenAI y Anthropic pueden ser manipulados. Al pedirles escanear c\u00f3digo malicioso, las herramientas ejecutan comandos da\u00f1inos ocultos en archivos de texto comunes.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Bypass_de_seguridad_en_GitHub_Copilot\"><\/span><strong>Bypass de seguridad en GitHub Copilot<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Un estudio demostr\u00f3 que los modelos integrados en GitHub Copilot esquivan sus restricciones de seguridad mediante \u00abjailbreaks de flujo de trabajo\u00bb. Aunque los asistentes rechazan peticiones da\u00f1inas en el chat directo, las redactan por completo si se les solicita como pasos l\u00f3gicos de programaci\u00f3n.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"450\" height=\"236\" src=\"https:\/\/masquedigital.com\/wp-content\/uploads\/2026\/07\/image-21.png\" alt=\"\" class=\"wp-image-10543\" srcset=\"https:\/\/masquedigital.com\/wp-content\/uploads\/2026\/07\/image-21.png 450w, https:\/\/masquedigital.com\/wp-content\/uploads\/2026\/07\/image-21-300x157.png 300w, https:\/\/masquedigital.com\/wp-content\/uploads\/2026\/07\/image-21-18x9.png 18w\" sizes=\"auto, (max-width: 450px) 100vw, 450px\" \/><\/figure>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Tres fallos de seguridad corregidos en el asistente OpenClaw permit\u00edan ejecutar c\u00f3digo arbitrario y robar credenciales del sistema anfitri\u00f3n. Un investigador demostr\u00f3 que la cadena de ataque pod\u00eda activarse externamente mediante un simple mensaje de WhatsApp. El enga\u00f1o a los agentes de IA de seguridad Investigadores desarrollaron un ataque llamado \u00abFriendly Fire\u00bb, que demuestra c\u00f3mo<br \/><a href=\"https:\/\/masquedigital.com\/en\/noti-tips\/vulnerabilidades-en-asistente-de-ia-openclaw\/\" class=\"more\">Read more<\/a><\/p>","protected":false},"author":1,"featured_media":10541,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","footnotes":""},"categories":[207],"tags":[25,32,42,93,37,180,146],"class_list":["post-10537","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-noti-tips","tag-google-es","tag-marketing-digital-es","tag-masquedigital-es","tag-rafael-eladio-nunez-aponte-2","tag-rafael-nunez-es","tag-rafael-nunez-aponte","tag-seo-es"],"_links":{"self":[{"href":"https:\/\/masquedigital.com\/en\/wp-json\/wp\/v2\/posts\/10537","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/masquedigital.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/masquedigital.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/masquedigital.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/masquedigital.com\/en\/wp-json\/wp\/v2\/comments?post=10537"}],"version-history":[{"count":2,"href":"https:\/\/masquedigital.com\/en\/wp-json\/wp\/v2\/posts\/10537\/revisions"}],"predecessor-version":[{"id":10546,"href":"https:\/\/masquedigital.com\/en\/wp-json\/wp\/v2\/posts\/10537\/revisions\/10546"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/masquedigital.com\/en\/wp-json\/wp\/v2\/media\/10541"}],"wp:attachment":[{"href":"https:\/\/masquedigital.com\/en\/wp-json\/wp\/v2\/media?parent=10537"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/masquedigital.com\/en\/wp-json\/wp\/v2\/categories?post=10537"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/masquedigital.com\/en\/wp-json\/wp\/v2\/tags?post=10537"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}