OpenClaw 2026.8.2 adds a Linux desktop app and widens what sessions see by default
OpenClaw 2026.8.2 was published on September 1, 2026. Two entries in a long set of release notes matter more than the rest: a desktop application for Linux, and a change to what a session may reach by default. Sessions that do not run in a sandbox can now work with other sessions of the same agent unless an operator narrows that. The release also raises the managed Sharp dependency to 0.35.4 with libheif 1.23.2, fixing vulnerabilities in image decoding.
In a long release, the entry that matters most is easy to miss. In OpenClaw 2026.8.2, published on September 1, 2026, that entry is the new default for session visibility. After the upgrade, a session that does not run in a sandbox reaches further than it did before, and nobody has to choose that for it to happen.
A desktop companion for Linux
The Linux build installs as a .deb package or as an AppImage on x86-64 Linux. It connects to a local or remote Gateway, and Quick Chat opens from the system tray or from an X11 keyboard shortcut.
The two install paths update differently, and the notes say so plainly. AppImage updates are signature-verified. A .deb install stays with the system package tooling, which means the machine's existing update and signing policy applies to it unchanged.
A default that opened
Sessions that are not sandboxed can now, by default, work with other sessions of the same agent, retained cron sessions included. The release notes address the consequence directly: an operator running a shared agent should set tools.sessions.visibility to tree or self where narrower access is needed.
Sandbox restrictions and cross-agent restrictions are still enforced, so this is not everything opening to everything. The direction still deserves attention. A default that widens takes effect for everyone who upgrades, while a default that narrows only inconveniences the people who needed the wider setting.
The security entries in this release
Four items concern what leaks or what gets through, rather than what the product can do.
- The managed Sharp dependency moves to 0.35.4 with libheif 1.23.2, fixing vulnerabilities in image decoding while the dependency stays optional.
- Values marked private are redacted in the macOS application logs, and credential values and prefixes are kept out of routine diagnostics.
- Oversized HTTP responses and oversized server-sent events from an MCP server are rejected before parsing, while healthy long-lived streams and keepalives continue.
- Permission changes now apply to runs already under way, and session tool policies are preserved on cloud workers, so moving where work runs does not widen what it may do.
Related
OpenClaw 2026.9.2 turns Swarm on by default and makes sessions visible to other agents
The open personal assistant shipped 2026.9.2 on September 5, 2026, and two of its lines describe defaults rather than features. Swarm, which runs several sub-agents at once, is now on unless it is switched off, and session tools now show every session instead of only the calling agent's. The same release makes GPT-6 Astra selectable, applies most settings changes without restarting the Gateway, and moves plugin icons into the package. Plugin authors get a date: the deprecated prompt-context aliases become eligible for removal on or after September 8, 2026.
OpenClawverified
Claude Code 2.1.261 changes what Ctrl+W does and stops auto-approving diagram-renderer links
The release that landed on September 4, 2026 is mostly fixes, but four entries change behavior that was already there. The prompt's word-editing keys now match Bash, and the setting that used to select a keybinding style has no effect at all. Auto mode now treats a link that packs your content into a public diagram renderer's URL as an upload to that site, so it is no longer approved without you. Two new settings raise how much command output reaches the model inline, up to 128,000 characters.
Anthropicverified
GitHub Copilot switches GPT-6 Astra on by itself and leaves Claude Fable 5.1 off
GPT-6 Astra became generally available in GitHub Copilot on September 4, 2026, for the Pro+, Max, Business, and Enterprise plans. Claude Fable 5.1 reached the same four plans three days earlier. The two arrived with opposite administrator defaults: Astra is enabled automatically under default model enablement, while the Fable 5.1 policy is off until someone turns it on. Fable 5.1 is also the one that retains prompts and outputs, and the zero-retention exemption runs only to the end of the calendar year.
GitHubverified