The free, open-source AI agent platform OpenClaw has exposed more than 140,000 instances to the open internet, with researchers warning of a systemic security failure.