OpenClaw 2026.10.8 closes sandbox and browser-policy bypasses
OpenClaw released signed 2026.10.8 with remediation for the eMudhra certificate compromise, blocked sandboxed child agents from launching host CLI models, stopped browser-policy bypass through Nodes and repaired provider-key and reasoning leaks alongside extensive update and recovery fixes.
Why it matters: The patch closes paths that could cross agent isolation or expose credentials and also repairs stuck recovery states. Operators need both the upgrade and a check for separate trust stores or bypass tunnels that OpenClaw cannot update.