OpenClaw 5.16 Beta Surge: xAI Grok OAuth, Codex App-Server Default, Security Roadmap, and 245K Exposed Servers

Release

OpenClaw 2026.5.16-beta.3: xAI Grok OAuth Login for SuperGrok Subscribers

The latest beta adds native OAuth login for xAI Grok, so SuperGrok subscribers can authenticate xai/* models without needing an XAI_API_KEY sitting in their config. It also ships openclaw cron run --wait with poll controls, letting scripts actually block on a queued cron job instead of fire-and-forget into the void.

Analysis

5.16 Beta 1 Deep Dive: Localized Onboarding, Skill Caching, and Malformed-Input Guards

A solid breakdown of the reliability-focused work in 5.16 beta 1: setup wizard now ships in English, Simplified Chinese, and Traditional Chinese, hydrated skills are cached across warm turns keyed by redacted config, and malformed plugin metadata now gets rejected at install time instead of silently dropped. If you run OpenClaw as team infrastructure, the cron fallback fixes and stricter plugin checks are the ones to act on.

May 15-16 Pulse: Streaming Replacement, Codex Auth Hardening, and the Governance Signal

A useful synthesis of the May 15 stable and May 16 beta activity: streaming chunk deduplication via assistant stream replace metadata, tighter Codex OAuth refresh and relogin error classification, and MCP server config now projecting into Codex app-server sessions. The editorial point lands well -- the platforms winning in 2026 are the ones making recovery and auditability boring infrastructure, not demo features.

Security

Official Security Roadmap: fs-safe, Proxyline Egress Control, and Contextual Approvals

The OpenClaw team published its security direction directly: fs-safe pulls secure root-bounded filesystem primitives into a shared library so plugins stop reimplementing path checks, and Proxyline installs process-global routing so all network egress flows through a configured proxy with real enforcement rather than URL validation hacks. Contextual approvals are also in the works to make agent action prompts mean something instead of just interrupting flow.

Security Roadmap Coverage: SQLite State Migration and What the Roadmap Means for Operators

Good third-party read on the May 15 roadmap drop, covering the SQLite migration for runtime state (session logs, plugin states) that eliminates a swath of filesystem calls, plus honest caveats on Proxyline's limits around raw sockets and native modules. The OCLAW token angle in the article is noise, but the roadmap analysis is worth the read for operators evaluating enterprise deployment.

Cyera Research: 245,000 Publicly Exposed OpenClaw Servers, Four New CVEs Patched

Shodan and ZoomEye scans found roughly 245,000 publicly accessible OpenClaw instances as of May 2026 -- a Priority 1 advisory for anyone running a public-facing install. Cyera disclosed four previously unknown CVEs including a CVSS 9.6 TOCTOU sandbox escape (CVE-2026-44112) and a CVSS 8.8 credential-leaking heredoc flaw (CVE-2026-44115), all patched in the April 23 release. If you have not rotated secrets and applied those patches, do it now.