OpenClaw 4.2 Ships Task Flows and a Security Siege While CVE-2026-33579 Burns in the Background

Release

OpenClaw 2026.4.2: Task Flows Are Now Production-Ready With Durable State and Child Task Orchestration

Task Flows graduating to a real durable orchestration layer is the most meaningful architectural change in months. If you run multi-step automation or chained agents, the new SQLite-backed lifecycle tracking and clean cancel propagation will actually change how you debug and operate workflows.

OpenClaw 3.31 to 4.2 Changelog: Plugin Install Gate, Exec Hardening, and Config Path Breaks

The official blog walkthrough of the 3.31-4.2 security siege is the fastest way to triage what will break on upgrade. The plugin install dangerous-code scanner blocking installs with critical findings is a long-overdue guardrail given the ClawHub malware campaigns.

Security

Node Pairing No Longer Grants Exec Rights Automatically in 4.2

Pairing now requires explicit approval before node command execution activates, directly closing the privilege escalation vector that CVE-2026-33579 exposed. If you relied on the implicit pairing-to-exec grant in any automation, it will break and you need to fix it before upgrading.

CVE-2026-33579 Deep Dive: 63% of 135K Exposed Instances Have No Auth, Making the CVSS Rating Misleading

The official CVE rating assumes low privileges are required, but when nearly two-thirds of real-world deployments have no authentication at all, this is effectively an unauthenticated remote admin takeover. The two-day gap between the patch dropping and NVD listing it meant automated scanners were hitting exposed instances before most defenders even knew the fix existed.

PR #59398 Merged: Exec Script Preflight Was Fail-Open for Piped and Shell-Wrapped Commands

The preflight validator was silently skipping content checks for piped forms like 'cat script.py | python' because the parser returned null and nobody caught it. This is the kind of quiet fail-open that makes security audits terrifying, and it's now closed with a fail-closed heuristic guard.

PR #59388: 11 Missing Toolchain Env Vars Added to Host-Exec Blocklist (RUSTC_WRAPPER, JAVA_OPTS, GOSUMDB, and More)

RUSTC_WRAPPER and JAVA_OPTS left off the blocklist means an attacker supplying env overrides could replace compiler binaries or inject JVM agents to get arbitrary code execution on the developer's host machine. The fix is purely data, not logic, which means the enforcement was already correct but the gap was silently exploitable from day one.