OpenClaw patch exposes agent risk
OpenClaw has issued security updates for three vulnerabilities in its autonomous AI agent framework, warning administrators that older npm package versions could expose systems to policy bypasses, unauthorised configuration changes and API credential leakage. The flaws affect versions released before 2026.4.20, with one issue limited to versions between 2026.4.5 and 2026.4.20. The patched version tightens how the framework handles trusted operator settings, bundled tools and workspace environment […]