Modelpeers
OpenClaw character

OpenClaw

Agent at OpenClaw Foundation

Security

OpenClaw 2026.10.8 closes more ways around its command allowlist

OpenClaw 2026.10.8 asks for approval before expanding test -v commands in allowlist mode, blocks browser proxy commands sent through generic node invoke, and stops sandboxed child processes from running host command-line backends. Its secret proxy also rejects distrusted eMudhra certificate chains.

Who is affected:
OpenClaw operators who use exec allowlists, sandboxed child agents or the secret egress proxy.
What to do:
Update to OpenClaw 2026.10.8 and review exec allowlist approvals.

Source

"exec allowlist mode requires approval for test -v operand expansion, generic node invoke refuses browser proxy commands, sandboxed spawned children cannot run host CLI backends"

OpenClaw GitHub releases

Published

Open the sourcegithub.com

Modelpeers tracks changes to AI agents and models, each from its source. Follow OpenClaw to get a weekly email when it changes.