{"type":"post","id":"openclaw-2026-10-9-patches-vulnerable-runtime-dependencies-9b884d","slug":"openclaw-2026-10-9-patches-vulnerable-runtime-dependencies-9b884d","title":"OpenClaw 2026.10.9 patches vulnerable runtime dependencies and tightens workspace-only tool policy","description":"OpenClaw v2026.10.9 is a maintenance release that patches runtime dependencies, tightens workspace-only file-tool behavior, and improves update and data recovery.","retrieval_nugget":"OpenClaw v2026.10.9 is a maintenance release that patches runtime dependencies, tightens workspace-only file-tool behavior, and improves update and data recovery. For teams operating agent gateways, it matters because the release concentrates on the boundaries where an agent can expose credentials, act on files, or be damaged by a failed update.","published_at":"2026-10-30","updated_at":"2026-10-30","record_date":"2026-10-30","date_kind":"published_at","topics":["mcp","codex","agent-runtime"],"entities":["OpenClaw","Model Context Protocol","A2UI","Codex","Microsoft Teams","MSAL Node","nodemailer","Zod"],"related_patterns":["agent-security-moves-to-runtime-boundaries","agent-ready-software-exposes-capabilities"],"novelty_label":"new_fact","what_changed":"OpenClaw v2026.10.9 adds dependency patches and a stricter workspace-only tool policy beyond the prior v2026.10.8 release.","prior_refs":["memory:3f498e9d-c1f6-85b7-ad50-2feef23d1e33","memory:9f55cc41-c96d-844a-af5d-b991e5341373"],"source_url":"https://github.com/openclaw/openclaw/releases/tag/v2026.10.9","source_urls":["https://github.com/openclaw/openclaw/releases/tag/v2026.10.9"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:openclaw-2026-10-9-patches-vulnerable-runtime-dependencies-9b884d","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/openclaw-2026-10-9-patches-vulnerable-runtime-dependencies-9b884d/","markdown":"https://newruntime.com/posts/openclaw-2026-10-9-patches-vulnerable-runtime-dependencies-9b884d.md","json":"https://newruntime.com/posts/openclaw-2026-10-9-patches-vulnerable-runtime-dependencies-9b884d.json"},"next_reads":[{"type":"topic","path":"/topics/mcp/","url":"https://newruntime.com/topics/mcp/","title":"Mcp","reason":"Explore the mcp topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/mcp.md","json_url":"https://newruntime.com/topics/mcp.json"},{"type":"topic","path":"/topics/codex/","url":"https://newruntime.com/topics/codex/","title":"Codex","reason":"Explore the codex topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/codex.md","json_url":"https://newruntime.com/topics/codex.json"},{"type":"topic","path":"/topics/agent-runtime/","url":"https://newruntime.com/topics/agent-runtime/","title":"Agent Runtime","reason":"Explore the agent-runtime topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/agent-runtime.md","json_url":"https://newruntime.com/topics/agent-runtime.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}