What changed
OpenClaw released signed 2026.10.8 with remediation for the eMudhra certificate compromise, blocked sandboxed child agents from launching host CLI models, stopped browser-policy bypass through Nodes and repaired provider-key and reasoning leaks alongside extensive update and recovery fixes.
Why it matters
The patch closes paths that could cross agent isolation or expose credentials and also repairs stuck recovery states. Operators need both the upgrade and a check for separate trust stores or bypass tunnels that OpenClaw cannot update.
What to do
Pin and verify the signed release, restart the Gateway, update independent trust stores, then replay a sandbox escape attempt, a Nodes browser-proxy call and a failed-update recovery before restoring privileged agents.
Caveat
This is a date-correct 27 October catch-up. The release repairs named paths but does not prove a previously exposed environment is clean; independent apps, tunnels and credentials still require local remediation.