openclaw just shipped 40+ security fixes in two weeks. two GHSAs. a breaking auth change. the founder left for openai.

here’s what they patched:

→ session exhaustion (no idle reaping, no eviction cap) → permissive tool access via HTTP bridge (now deny-by-default) → path traversal in plugins and skills → IP-based auth bypass on canvas

every one of these would have been mitigated by a governance layer that sits between the agent and your services — independent of the runtime.

the system prompt is the lock on the front door. the runtime is the building. neither is the security system.

that’s what an agentic control plane does. and openclaw just proved why it matters.

full breakdown → agenticcontrolplane.com/blog/openclaw-just-patched-40-security-holes/