$ cat openclaw/week/2026-09-07.log
the week in review · Sep 7 – Sep 13, 2026
Three auth bypass bugs fixed, 2026.9.4 ships rollback recovery
By RepoJournal · composed from the cited sources · human-reviewed weekly · methodology
Slack file downloads, OpenAI-compatible transport, and outbound attachments all leaked credentials or data before this week's patches.
Slack file downloads could miss conversation authorization openclaw/openclaw
A file download request could bypass the conversation authorization check, letting anyone with the link fetch files they were never granted access to. Upgrade to 2026.9.4 to close the gap.
OpenAI-compatible transport could send provider credentials to the wrong endpoint openclaw/openclaw
The OpenAI-compatible transport could send provider credentials to an endpoint that was not the intended one, exposing API keys beyond their scope. The fix ships in 2026.9.4.
Outbound attachments could ignore requester read denials openclaw/openclaw
Outbound attachments ignored read denials set by the requester, so a file you marked unreadable could still leave the system attached to a message. 2026.9.4 restores the permission check.
openclaw 2026.9.4 openclaw/openclaw
2026.9.4 adds rollback recovery for compatible failed updates: the previous package and its configuration are restored when schema checks prove rollback safe, though database migrations still need a verified pre-update backup. The release notes say "database migrations still require a verified pre-update backup".
openclaw 2026.9.3 openclaw/openclaw
2026.9.3 rehearses core and plugin changes in isolated candidate state before activation and recovers abandoned update records without stopping a healthy Gateway. If you are still on an older release, this is the bridge to 2026.9.4.
feat(proof): collect selective evidence within the original review (#1425) openclaw/clawsweeper
ClawSweeper now collects selective evidence within the original review instead of forcing a separate reassessment pass. Maintainers get proof admission and bounded artifact verification without restarting the review.
feat(review): give reviewers allowlisted network access and a truthful capability prompt openclaw/clawsweeper
Reviewers get allowlisted network access and a capability prompt that matches what the sandbox actually provides, so Codex reviews no longer publish judgments about evidence they could never reach.
fix(wsl2): disable WSLg on headless managed leases openclaw/crabbox
Crabbox disables WSLg on headless managed Windows leases while preserving the rest of the Windows SSH user's .wslconfig, and keeps existing settings for explicit GUI requests. The change lands alongside a lease-work cleanup that stops recovery scripts from timing out against already-deleted endpoints.
$ ls openclaw/week/ # the briefings behind this review
Keep up with OpenClaw in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.