OpenClaw v2026.10.9

OpenClaw v2026.10.9 is a maintenance release of the self-hosted AI assistant that patches vulnerable dependencies, applies tools.fs.workspaceOnly to Gateway-built tools, keeps credentials out of MCP inspection and logs, and makes failed update rollbacks safe.

Visit OpenClaw ↗Repository ↗Release notes ↗

Free (open source)MITTypeScript (Node.js) (unverified)★ 393,429 (as of 2026-10-30)by OpenClaw Foundation

Why it matters

For people running OpenClaw as a personal assistant connected to their chat apps and accounts. It closes several security gaps and makes the assistant recover from failed updates, full disks and database changes instead of going offline.

What's new

Patched dependencies: fast-uri 4.2.3 for MCP schema validation, nodemailer 10.1.4 so spoofed IMAP senders can't pass the sender token gate, and MSAL Node 7.1.1 for Microsoft Teams.
tools.fs.workspaceOnly now applies to Gateway-built tools, so delegate changes still need approval and media tools stay inside the workspace.
Live credentials are kept out of MCP CLI inspection, and Google OAuth client secrets are masked in logs.
Failed update rollbacks are safer: Git-source rollbacks keep your edits, and npm rollbacks on Windows retry and report the exact restore step.
Agents recover after a full disk once space is free, without a restart, and intact databases and full-text indexes recover after SQLite tokenizer changes.

Taken from the project's own release notes. Claims about speed or accuracy are the maker's unless stated otherwise.

Try it if: You run OpenClaw with email, Teams or MCP tools connected and want the latest security patches.

Worth knowing: OpenClaw holds credentials for the chat apps and model providers you connect, so security releases like this one are worth installing promptly.

Quick facts

Pricing	Free; you pay your chosen model provider
Free or paid	Free (open source)
License	MIT
Language	TypeScript (Node.js)not verified
Platform	macOS, Linux, Windows (incl. WSL2), Docker; apps for macOS, iOS, Android, Windows and Linuxnot verified
GitHub stars	★ 393,429 (as of 2026-10-30)
Maker	OpenClaw Foundation

Related ranking

See how established tools compare in Best AI Agents That Do Tasks for You. New releases aren't scored until we review them against the rubric.

What we couldn't verify

quick_facts.platform (carried from earlier releases)
quick_facts.language (Node.js version requirement not rechecked)

Checked 2026-10-30 from the release notes's own pages. Prices and star counts change, so confirm on the official site. Listing here is not a ranking or an endorsement.