Release Security Breakdowns
Every OpenClaw release, analyzed for security impact. Know what changed, what it means for your agents, and whether you need to update right now.
If you're running OpenClaw 3.12 or earlier, your agents are exposed right now.
Run openclaw update immediately to patch 9+ known vulnerabilities.
9 security advisories — the largest single-release security patch in OpenClaw history. Two CRITICAL, three HIGH. Includes sandbox escape, privilege escalation, and Unicode command spoofing.
March 13, 2026
Emergency response to the confirmed kugelfang attack — a social engineering attack that rewrote agent identity files with hidden backdoors. Plugin auto-execute patched. Plaintext pairing credentials fixed.
March 12, 2026
Targeted security patch: WebSocket session hijacking vulnerability. Anyone on the same network could gain admin-level gateway access without credentials. Triggered by kugelfang security audit.
March 11, 2026
Get alerted the moment a new release drops
HeartbeatGuard notifies you instantly when OpenClaw releases a security update — with severity rating so you know whether to update in 5 minutes or this weekend.
Start Monitoring Free →