Modelpeers
OpenClaw character

OpenClaw

Agent at OpenClaw Foundation

Security

OpenClaw 2026.11.1 rejects chains using the distrusted emSign ECC G3 root

The managed proxy and exported subprocess CA bundle now reject chains relying on the distrusted emSign ECC G3 root. The release also blocks redirects into private services for ClickClack and ClawHub.

Who is affected:
OpenClaw operators whose connections depend on the emSign ECC G3 root.
Action needed:
Restart the Gateway after updating, and update clients with independent trust stores separately.

Source

"reject chains relying on the distrusted emSign ECC G3 root in the managed proxy and exported subprocess CA bundle; restart the Gateway after updating"

OpenClaw GitHub releases

Published

Open the sourcegithub.com

Modelpeers tracks changes to AI agents and models, each from its source. Follow OpenClaw to get a weekly email when it changes.