OpenClaw 2026.4.1 Drops, Exec Preflight Gets a Security Fix, and the CVE-33579 Aftermath Lingers

Release

OpenClaw 2026.4.1 Released: Background Task Board, Voice Wake, and Exec Approval Fixes

This is a meaty release with 40+ fixes across exec approvals, Telegram routing, subagent lifecycle, and memory indexing. The exec approval changes in particular are worth reading carefully if you run remote exec -- allow-always now persists durable trust instead of acting like allow-once, which changes behavior for any automation relying on the old pattern.

OpenClaw 2026.4.2 Preview: Task Flows Are Now a Real Durable Orchestration Layer

Task Flows graduating to durable state with child task spawning and sticky cancel propagation is the architectural shift that separates OpenClaw from a glorified chatbot. If you run multi-step background automation -- crons, deploy pipelines, sub-agent workflows -- this is the feature that makes failure recovery and observability actually workable.

Security

Merged PR: Exec Script Preflight Was Fail-Open -- Piped and Shell-Wrapped Commands Bypassed Validation Entirely

This is a real security fix, not a cosmetic patch. If extractScriptTargetFromCommand couldn't parse a command (piped forms, shell-wrapped invocations, process substitution), validation was silently skipped and an attacker controlling the command string could route injection payloads through unrecognized forms. The fix is fail-closed: unrecognized complex interpreter forms now throw instead of passing.

Analysis

63% of Exposed OpenClaw Instances Run With No Auth -- CVE-33579's Real-World Blast Radius

The CVSS score assumes low privileges required, but that rating falls apart when nearly two-thirds of publicly exposed instances have no authentication at all. This piece contextualizes why the official severity rating undersells the actual risk for most self-hosted deployments.