OpenClaw passes Trail of Bits security audit: all findings fixed

Tools official 1 src. ~1 min

The OpenClaw platform's Trail of Bits review — run through OpenAI's Codex-assisted 'Patch the Planet' initiative — produced 27 private advisories and 3 hardening PRs: 24 severity-rated issues (0 Critical, 2 High, 16 Medium, 6 Low), 23 confirmed, all fixed on main and shipped in 2026.8.1 and 2026.7.33 LTS. Key themes: permissions must carry through follow-on work and bind to the exact file/action, with checks at the moment of use.

Why it matters

Agent-permission model lessons from the highest-profile open agent harness, done with AI-assisted security research.

Importance: 2/5

Notable security audit of a flagship open agent platform

openclaw agents security audit

Sources

official OpenClaw Completes Security Audit