OpenClaw completed a security audit with Trail of Bits through OpenAI’s Patch the Planet initiative. Trail of Bits submitted 27 advisories and 3 hardening pull requests. 24 advisories described severity-rated vulnerabilities, with 23 confirmed. The ratings were 0 Critical, 2 High, 16 Medium and 6 Low. All actionable issues have been repaired and all hardening PRs merged. The audit used AI-assisted workflows with manual review. OpenClaw fixed issues by carrying permissions forward and binding checks to exact resources. It also ensured permission changes affect work already in progress. Every issue is now shipped in the 2026.8.1 and 2026.7.33 LTS releases.
What changed
Some permissions and checks did not persist through follow-on work or mid-run configuration changes.
What it unlocks
Binding security checks to the exact resource and rechecking permissions mid-run.
- 27 private repository advisories
- 3 standalone hardening pull requests
- 24 severity-rated vulnerabilities
- 0 Critical, 2 High, 16 Medium, 6 Low
What you need to act on it
- OpenClaw 2026.8.1 or 2026.7.33 LTS
Sources