OpenClaw Watch

OpenClaw's new sessions_search lets power users query exact phrases across past transcripts, instantly returning sessionKeys and excerpts to pull full...

A researcher chained three patched OpenClaw flaws to turn a WhatsApp message into host-level code execution, revealing how AI agents blur trust...

Mobile Apps Launch

• 🔥 Native iOS and Android Apps: OpenClaw launches official Android and iPhone apps allowing control of AI agents from...

The Tokenlab Openclaw Provider plugin expands model choices by pulling live metadata from TokenLab's /v1/models catalog—including pricing, context...

OpenClaw runs on spare laptops to handle email, calendar, WhatsApp, and Slack, proving it's a capable self-hosted agent. It has surged to ~145,000 GitHub stars and 20,000 forks.

A new tutorial details OpenClaw installation on pure Windows using only domestic resources and local models via Ollama + Qwen. It covers system requirements, three install methods, openclaw.json config, and startup steps.

OpenClaw's layered architecture adapts its five-stage pipeline for educational use with distinct control and data flows.

• Solid arrows show control...

Enable TikTok actions in OpenClaw with Composio's managed auth and 10 ready tools.

• Install the plugin: openclaw plugins install...

Exposed gateways remain the primary risk, enabling RCE on any tokenless instance reachable beyond 127.0.0.1.

• Confirm the gateway actually listens...

OpenClaw launches native Android and iOS apps to control AI agents from anywhere, connecting securely via a self-hosted Gateway on user-controlled systems for privacy-first access.

Security Advisories

• 🔥 WhatsApp RCE Vulnerabilities: Three high-severity flaws in OpenClaw 2026.6.1 enable remote code execution via a single...

NanoClaw offers a minimal, container-isolated alternative while OpenClaw delivers extensive capabilities at the cost of complexity.

Key differences...

One WhatsApp message can achieve full remote code execution in OpenClaw via three high-severity flaws that bypass environment filters, Git...

Muse Spark 1.1 ranks among the top models for OpenClaw and other agent harnesses. Community member @garrytan called out its strong results on OpenClaw directly.

OpenClaw has moved from a six-month-old weekend project to a 501(c)(3) foundation with full-time staff and backing from OpenAI, NVIDIA, Microsoft and the University of Michigan, locking in open-source independence and sustained development.

OpenClaw's official ClawHub skills market enables third-party submissions and installs, but its title signaling a major incident underscores security and trust vulnerabilities amid fast ecosystem growth.

Security Advisories

• 🔥 HalluSquatting Attacks: Researchers identified serious security issues in ClawHub that could let attackers spread...

OpenClaw gets full observability via hook-backed telemetry and pre-tool guardrails in NeMo Relay, but only partial security and no optimization support, forcing patch-based integration for managed execution rewrites.

Intel's SuperClaw beta, built directly on the OpenClaw framework, tackles the agentic trilemma through hybrid local-cloud handoffs that keep 70% of...

• Direct hit on ClawHub: Researchers confirmed OpenClaw was tested in HalluSquatting experiments, where hallucinated skill installs reached 100%...