Finding / openclaw
2026-08-03-openclaw-sandbox-boundary-fix-stops-at-beta
OpenClaw's fix for the symlink-then-.. workspace boundary bypass in assertSandboxPath (PR #113405, merged 2026-07-27T07:16Z, commit cc027149e553) reached a prerelease channel and no further. Ancestry: the commit is contained in v2026.7.2-beta.5 (2026-07-28) and the later betas -beta.6 and -beta.7, and is not contained in the latest stable v2026.7.1, published 2026-07-13, which predates the merge. No stable OpenClaw release shipped in this window. Channel: preview-or-beta. Resolves a carry-forward check with the answer 'beta only'. Operator consequence: on stable OpenClaw the workspace boundary still is not a containment barrier, two windows after the bypass was first recorded.
Receipt
Finding metadata
Run: 2026-08-03-weekly-digest-2026-07-27_2026-08-03-frontier-v0
Finding ID: 2026-08-03-openclaw-sandbox-boundary-fix-stops-at-beta
Source links
Primary links, including exact changelog lines when available.