Security incidents, vulnerabilities, and advisories
105 articles
openclaw/openclaw released version v2026.4.22. This release includes breaking changes. Key updates: Providers/xAI: add image generation, text-to-speech, and speech-to-text support, including `grok-imagine-image` / `grok-imagine-image-pro`, reference-image edits, six live xAI voices, MP3/WAV/PCM/G...
openclaw/openclaw released version v2026.4.20. Key updates: Onboard/wizard: restyle the setup security disclaimer with a single yellow warning banner, section headings and bulleted checklists, and un-dim the note body so key guidance is easy to scan; add a loading spinner during the initial model...
openclaw/openclaw released version v2026.4.20-beta.2 (pre-release). Key updates: Onboard/wizard: restyle the setup security disclaimer with a single yellow warning banner, section headings and bulleted checklists, and un-dim the note body so key guidance is easy to scan; add a loading spinner dur...
openclaw/openclaw released version v2026.4.20-beta.1 (pre-release). Key updates: Onboard/wizard: restyle the setup security disclaimer with a single yellow warning banner, section headings and bulleted checklists, and un-dim the note body so key guidance is easy to scan; add a loading spinner dur...
openclaw/openclaw released version v2026.4.15-beta.1 (pre-release). Key updates: Control UI/Overview: add a Model Auth status card showing OAuth token health and provider rate-limit pressure at a glance, with attention callouts when OAuth tokens are expiring or expired. Backed by a new `models.au...
openclaw/openclaw released version v2026.4.14. This release includes breaking changes. Key updates: OpenAI Codex/models: add forward-compat support for `gpt-5.4-pro`, including Codex pricing/limits and list/status visibility before the upstream catalog catches up. (#66453) Thanks @jepson-liu.; Te...
openclaw/openclaw released version v2026.4.14-beta.1 (pre-release). Key updates: Telegram/forum topics: surface human topic names in agent context, prompt metadata, and plugin hook metadata by learning names from Telegram forum service messages. (#65973) Thanks @ptahdunbar..
openclaw/openclaw released version v2026.4.12. This release includes breaking changes. Key updates: QA/lab: add Convex-backed pooled Telegram credential leasing plus `openclaw qa credentials` admin commands and broker setup docs. (#65596) Thanks @joshavant.; Memory/Active Memory: add a new option...
openclaw/openclaw released version v2026.4.10. This release includes breaking changes. Key updates: Models/Codex: add the bundled Codex provider and plugin-owned app-server harness so `codex/gpt-*` models use Codex-managed auth, native threads, model discovery, and compaction while `openai/gpt-*`...
openclaw/openclaw released version v2026.4.9. Key updates: Memory/dreaming: add a grounded REM backfill lane with historical `rem-harness --path`, diary commit/reset flows, cleaner durable-fact extraction, and live short-term promotion integration so old daily notes can replay into Dreams and dur...
