Security First
OpenClaw 2026.6.6 is a major security and performance release. It hardens boundaries between agents and the host environment while drastically reducing startup latency for a snappier experience.
Hardened Security Boundaries
We've implemented substantial tightening of security boundaries across the entire system to ensure your host environment remains protected.
- Fail-Closed Approvals: Execution approvals now fail closed (deny) on timeout instead of hanging or defaulting to permissive states.
- Environment Isolation: Hardened sandbox binds and host environment inheritance to prevent unauthorized access from agent sessions.
- Transcript & Media Safety: Redaction of transcript images and neutralization of browser-specific media directives to prevent raw data leaks.
- Codex & MCP Hardening: Tighter controls on Codex HTTP access and MCP stdio boundaries.
Telegram & iMessage Refinements
Messaging delivery is now safer and more resilient, especially for multi-topic and high-concurrency environments.
- Account-Scoped Topics: Telegram topics now route more accurately to the correct agent context.
- Streamed Text Survival: Improved handling ensures streamed text survives tool calls without being lost or truncated.
- Privacy Guard: Unauthorized DM text is strictly kept out of cache and prompt context.
- iMessage Recovery: Always-on inbound restart and hardened outbound transport for better reliability.
Performance Blitz
This release targets startup and first-reply latency with several core optimizations.
- Cached Model Metadata: Pre-warmed and reused model metadata avoids repeated registry rescans.
- Lazy Loading: Slash commands and UI plugins now load lazily to speed up initial interaction.
- Startup Speed: Removal of the startup catalog wait allows the UI to become interactive significantly faster.
Provider & Platform Updates
Expanding support for advanced models and simplifying onboarding flows.
- OpenRouter OAuth: A simplified onboarding flow for OpenRouter users.
- Claude Fable 5: Native support for adaptive thinking and improved reasoning replay.
- Browser CDP: Existing-session CDP support and WebSocket validation for more stable browser automation.
- Mobile UI: Improved iPad and iPhone control surfaces with better active connection visibility.
Under the Hood
- Embeddings Batching: Faster file processing through batched embeddings across files.
- Watchdog Timers: Improved task maintenance and diagnostics for long-running workflows.
- SQLite Auth Migration: Finalized verification for SQLite-based auth profile storage.
Upgrade Guide
Who should upgrade?
- Security-conscious operators running in shared or exposed environments
- Heavy Telegram and iMessage users
- Anyone experiencing slow UI startup or model loading times
How to Upgrade
Update your installation via the terminal:
openclaw update
FAQ
What security boundaries were hardened?
Substantial tightening across transcripts, sandbox binds, host environment inheritance, MCP stdio, and Codex access. Exec approvals now fail closed on timeout for maximum safety.
What's new for Telegram?
Safer delivery with account-scoped topics, streamed text surviving tool calls, and unauthorized DM text being kept out of cache and prompt context.
How was performance improved?
Startup and first-reply latency are lower due to cached model metadata, lazy slash-command loading, and the removal of the startup catalog wait.
Are there new provider features?
Yes, including OpenRouter OAuth onboarding and Claude Fable 5 adaptive thinking.
Need help from people who already use this stuff?
Join the OpenClaw Community
Get help with your setup, share your agent workflows, and stay up to date with the latest releases in our profit-lab community.