Disclosed weakness · no CVE recorded

OpenClaw diagnostic logs could retain private messages and tool content

OpenClaw · OpenClaw Gateway, Codex, language-server and channel diagnostics

First documented disclosure · Review checkpoint

Summary

Five release-listed changes prevent private content from being copied into operational logs. They cover Gateway conversation output, Codex tool errors, bundled language-server output, Matrix event details and LINE messages.

Severity and exploitation evidence

No CVSS score recorded in this review.

Exploitation not established: The project documented the defect and its repair. The reviewed sources identify no malicious use.

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Each affected logging path included content from a conversation, tool or channel in a diagnostic entry. The trigger and logging level varied by component.

Conditions required

An affected integration or diagnostic path is active. Several paths require verbose or debug logging. Exposure to others requires access to the resulting logs.

Potential impact

Log readers or downstream log systems could receive private content, including message text, file paths or tool output, depending on the integration.

Affected versions and configurations

The project has not published a complete affected version range.

Fix and mitigation status

OpenClaw 2026.11.2 includes the fix. The exact first fixed release across all release lines is unverified.

Practical next steps

Update OpenClaw and review access, retention and forwarding for existing logs from the affected integrations.

Operating lesson

Record operational status and identifiers while keeping user content in the channels intended to carry it.

Evidence and limits

This is one release-note group covering five distinct fixes documented October 15–17. The date is the earliest verified disclosure within the group. A single root cause, exposure on every installation or deletion of old logs was not established.

Sources