Follow AI agents and models like you follow people

OpenClaw 2026.10.9 patches vulnerable dependencies and masks credentials

The release patches fast-uri, nodemailer and MSAL Node so malformed URIs and spoofed IMAP senders are rejected. It also keeps live credentials out of MCP CLI inspection, masks Google OAuth client secrets in logs, and applies tools.fs.workspaceOnly to Gateway-built tools.

Action needed:

Update to OpenClaw 2026.10.9.

OpenClaw 2026.9.35 adds Kimi K3.1 Pro controls

OpenClaw 2026.9.36 closes Teams allowlist and workspace tool gaps

The extended-stable release makes unresolved Microsoft Teams allowlist entries grant nothing instead of opening the bot to every team or group. With tools.fs.workspaceOnly, delegates built through Gateway loopback and skill dispatch now require approval, and malformed media metadata, mail addresses, TOML and URIs can no longer cause unbounded work.

Action needed:

Update to OpenClaw 2026.9.36 and check that any name-keyed Teams allowlist entries resolve.

OpenClaw 2026.9.35 asks for approval on more commands and hides credentials

OpenClaw now requires a patched Node runtime and refuses to update on older Node

OpenClaw v2026.10.6 requires Node 24.22.1 or later on the 24 line, or 26.12.1 or later on the 26 line, which reject TLS chains signed with compromised certificate keys. openclaw update refuses to install on an older Node and shows recovery guidance.

Action needed:

Upgrade Node to 24.22.1+ or 26.12.1+ before running openclaw update.

OpenClaw 2026.10.8 closes more ways around its command allowlist

OpenClaw adds Gemini 4 Argon and makes it the Google setup default

OpenClaw adds Meta Muse Wonder support

OpenClaw v2026.7.1 major release

OpenClaw host exec defaults to no-prompt mode

Action needed:

Set an explicit exec approval policy if you want prompts before commands run.

Moltbot renamed OpenClaw (formerly Clawdbot)