Security incidents, vulnerabilities, and advisories
55 articles
openclaw/openclaw released version v2026.2.19. This release includes breaking changes. Key updates: iOS/Watch: add an Apple Watch companion MVP with watch inbox UI, watch notification relay handling, and gateway command surfaces for watch status/send flows. (#20054) Thanks @mbelinky.; iOS/Gateway...
openclaw/openclaw released version v2026.2.19-beta.1 (pre-release). This release includes breaking changes. Key updates: iOS/Watch: add an Apple Watch companion MVP with watch inbox UI, watch notification relay handling, and gateway command surfaces for watch status/send flows. (#20054) Thanks @m...
openclaw/openclaw released version v2026.2.17. This release includes breaking changes. Key updates: Agents/Anthropic: add opt-in 1M context beta header support for Opus/Sonnet via model `params.context1m: true` (maps to `anthropic-beta: context-1m-2025-08-07`).; Agents/Models: support Anthropic S...
openclaw/openclaw released version v2026.2.15. Key updates: Discord: unlock rich interactive agent prompts with Components v2 (buttons, selects, modals, and attachment-backed file blocks) so for native interaction through Discord. Thanks @thewilloftheshadow.; Discord: components v2 UI + embeds pa...
openclaw/openclaw released version v2026.2.15-beta.1 (pre-release). Key updates: Discord: unlock rich interactive agent prompts with Components v2 (buttons, selects, modals, and attachment-backed file blocks) so for native interaction through Discord. Thanks @thewilloftheshadow.; Discord: compone...
openclaw/openclaw released version v2026.2.14. Key updates: Telegram: add poll sending via `openclaw message poll` (duration seconds, silent delivery, anonymity controls). (#16209) Thanks @robbyczgw-cla.; Slack/Discord: add `dmPolicy` + `allowFrom` config aliases for DM access control; legacy `dm...
openclaw/openclaw released version v2026.2.13. This release includes breaking changes. Key updates: Discord: send voice messages with waveform previews from local audio files (including silent delivery). (#7253) Thanks @nyanjou.; Discord: add configurable presence status/activity/type/url (custom...
openclaw/openclaw released version v2026.2.12. This release includes breaking changes. Key updates: CLI: add `openclaw logs --local-time` to display log timestamps in local timezone. (#13818) Thanks @xialonglee.; Telegram: render blockquotes as native `` tags instead of stripping them. (#14608); ...
openclaw/openclaw released version v2026.2.6 (pre-release). Key updates: Models: support Anthropic Opus 4.6 and OpenAI Codex gpt-5.3-codex (forward-compat fallbacks). (#9853, #10720, #9995) Thanks @TinyTb, @calvin-hpnet, @tyler6204.; Providers: add xAI (Grok) support. (#9885) Thanks @grp06.; Web ...
openclaw/openclaw released version v2026.2.3. Key updates: Telegram: remove last `@ts-nocheck` from `bot-handlers.ts`, use Grammy types directly, deduplicate `StickerMetadata`. Zero `@ts-nocheck` remaining in `src/telegram/`. (#9206); Telegram: remove `@ts-nocheck` from `bot-message.ts`, type dep...
