OpenClaw's workspace boundary fix reached beta and stopped there
The fix for the symlink-then-.. bypass in assertSandboxPath merged 2026-07-27 and is contained, by ancestry, in v2026.7.2-beta.5 and the two later betas. It is not contained in the latest stable v2026.7.1, published 2026-07-13, which predates the merge. No stable OpenClaw release shipped in this window at all. The carried-forward question from the prior run was whether this fix would reach any channel; the answer is beta.
What this changes for operators
- On stable OpenClaw the workspace boundary is still not a containment barrier, two windows after the bypass was first recorded. Either run the beta deliberately, or do not treat the workspace path as a security boundary for agents handling untrusted content.
Run: 2026-08-03-weekly-digest-2026-07-27_2026-08-03-frontier-v0
Schema: bitter.frontier_signals.v0 / ID: 2026-08-03-openclaw-sandbox-fix-reaches-beta-only
Research evidence and publication history are open in the repository.