OpenClaw's China Integration: Feishu and WeCom Adoption Metrics

The scale of OpenClaw's integration into China's tech ecosystem is now undeniable. Last week, nearly 1,000 people lined up outside Tencent's headquarters to get the software installed for free, a viral event that underscores its rapid adoption beyond developer circles into the mainstream.

This grassroots surge is being backed by the major cloud platforms. Chinese tech companies including Tencent, Alibaba, and Volcano Engine have begun integrating OpenClaw into their cloud services. This creates a direct pipeline for users, connecting the AI agent to essential workplace tools like DingTalk and WeCom, and making deployment seamless for businesses and individuals across the country.

The key to this strategic fit is OpenClaw's design. It is built to be model-agnostic, allowing it to plug into any OpenAI-compatible LLM backend. This is critical for China, where local providers like Alibaba's Qwen and Moonshot AI's Kimi are dominant. The integration with these domestic models, hosted on local cloud infrastructure, provides a fully compliant, high-performance stack that avoids reliance on foreign AI services.

The Security and Exposure Crisis

The growth story is being overshadowed by a massive security failure. SecurityScorecard's STRIKE team has identified more than 135,000 internet-exposed OpenClaw instances as of this writing. This number, which surged from just over 40,000 earlier in the day. represents a systemic vulnerability where powerful AI agents are left wide open to attack.

A critical flaw in the Feishu integration amplifies this risk. A newly disclosed Server-Side Request Forgery (SSRF) vulnerability, CVE-2026-28451, affects versions prior to 2026.2.14. This flaw allows attackers to probe internal networks and exfiltrate sensitive data by manipulating the bot's media functions, turning a productivity tool into a potential entry point.

The root cause is the project's rapid, "vibe-coded" development. Experts warn this has created a massive access and identity problem. Convenience-driven deployment, weak default settings, and missing security controls have turned the platform into a high-value target, with its skill store itself riddled with malicious software.

Catalysts, Risks, and What to Watch

The immediate catalyst is the production-ready WeCom plugin. This official integration, co-built with Tencent Cloud contributors, is a direct channel to China's enterprise market. Its adoption rate will be the first real test of whether business users prioritize seamless workflow integration over security warnings.

The critical risk metrics are now in real-time. The 135,000+ internet-exposed instances is a staggering baseline. The key number to watch is the patching rate. If the community and enterprise users fail to update, the vulnerability count will remain elevated, turning the plugin's ease of use into a liability. Simultaneously, monitor for new vulnerabilities. The project's alarming number of forks and issues suggests rapid, unvetted changes, which could introduce fresh flaws even as old ones are patched.

The ultimate test is enterprise adoption. The plugin's success hinges on whether companies continue to accelerate deployment despite privacy and security concerns. If uptake stalls, it signals that the security crisis has outweighed the productivity promise. If it accelerates, it reveals a high-risk appetite among Chinese businesses, validating the integration push but leaving a massive attack surface exposed.