VYPR
← All advisories
High severity7.7NVD Advisory· Published Jun 12, 2026

CVE-2026-53832

CVE-2026-53832

Description

OpenClaw before 2026.5.18 allows local same-host callers to forge trusted-proxy identity headers, enabling attacker to assume operator identity.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

OpenClaw before 2026.5.18 allows local same-host callers to forge trusted-proxy identity headers, enabling attacker to assume operator identity.

Vulnerability

OpenClaw versions prior to 2026.5.18 contain an identity header validation vulnerability (CWE-290) in the trusted-proxy configuration. When the feature is enabled, the Gateway port accepts identity headers from local same-host callers without proper validation, allowing these callers to supply headers that are normally reserved for the trusted proxy. Affected versions: all OpenClaw releases before 2026.5.18 [1][2].

Exploitation

An attacker must have local access to the same host and be able to reach the proxy-facing Gateway port. No authentication is required to trigger the vulnerability. The attacker can send crafted HTTP requests containing forged identity headers to the Gateway port, which the system will treat as if they originated from the trusted proxy [1][2].

Impact

Successful exploitation allows the attacker to assume operator identity associated with the forged headers. The practical impact depends on the operator's configuration, but could include privilege escalation within the OpenClaw system, potentially leading to unauthorized access to operations, configurations, or data. The CIA outcome is authentication bypass by spoofing, with high confidentiality and integrity impacts [1][2].

Mitigation

The first stable patched version is 2026.5.18 [1]. As a workaround, bind the trusted-proxy ingress behind an actual proxy and firewall direct same-host access. General hardening measures include narrowing channel and tool allowlists, avoiding sharing one Gateway between mutually untrusted users, and disabling the affected feature when not needed [1].

References
  1. Same-host trusted-proxy deployments could accept local forged identity headers
  2. OpenClaw < 2026.5.18 - Identity Header Forgery via Trusted-Proxy Configuration

AI Insight generated on Jun 12, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

1

Patches

1
50a2481652b6

chore(release): prepare 2026.5.18 stable

https://github.com/OpenClaw/OpenClawPeter SteinbergerMay 18, 2026Fixed in 2026.5.18via release-tag
commit
124 files changed · +214 −214
  • CHANGELOG.md+1 −1 modified
    @@ -2,7 +2,7 @@
 
 Docs: https://docs.openclaw.ai
 
-## Unreleased
+## 2026.5.18
 
 ### Changes
  • extensions/acpx/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/acpx",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw ACP runtime backend",
   "repository": {
     "type": "git",
@@ -26,10 +26,10 @@
       "minHostVersion": ">=2026.4.25"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1",
+      "openclawVersion": "2026.5.18",
       "staticAssets": [
         {
           "source": "./src/runtime-internals/mcp-proxy.mjs",
  • extensions/admin-http-rpc/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/admin-http-rpc",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw admin HTTP RPC endpoint",
   "type": "module",
  • extensions/alibaba/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/alibaba-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Alibaba Model Studio video provider plugin",
   "type": "module",
  • extensions/amazon-bedrock-mantle/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/amazon-bedrock-mantle-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Amazon Bedrock Mantle (OpenAI-compatible) provider plugin",
   "repository": {
     "type": "git",
@@ -25,10 +25,10 @@
       "minHostVersion": ">=2026.5.12-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1",
+      "openclawVersion": "2026.5.18",
       "bundledDist": false
     },
     "release": {
  • extensions/amazon-bedrock/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/amazon-bedrock-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Amazon Bedrock provider plugin",
   "repository": {
     "type": "git",
@@ -27,10 +27,10 @@
       "minHostVersion": ">=2026.5.12-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1",
+      "openclawVersion": "2026.5.18",
       "bundledDist": false
     },
     "release": {
  • extensions/anthropic/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/anthropic-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Anthropic provider plugin",
   "type": "module",
  • extensions/anthropic-vertex/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/anthropic-vertex-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Anthropic Vertex provider plugin",
   "repository": {
     "type": "git",
@@ -25,10 +25,10 @@
       "minHostVersion": ">=2026.5.12-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1",
+      "openclawVersion": "2026.5.18",
       "bundledDist": false
     },
     "release": {
  • extensions/arcee/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/arcee-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Arcee provider plugin",
   "type": "module",
  • extensions/azure-speech/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/azure-speech",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Azure Speech plugin",
   "type": "module",
  • extensions/bonjour/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/bonjour",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Bonjour/mDNS gateway discovery",
   "type": "module",
   "dependencies": {
  • extensions/brave/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/brave-plugin",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Brave plugin",
   "repository": {
     "type": "git",
@@ -21,10 +21,10 @@
       "allowInvalidConfigRecovery": true
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/browser/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/browser-plugin",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw browser tool plugin",
   "type": "module",
  • extensions/byteplus/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/byteplus-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw BytePlus provider plugin",
   "type": "module",
  • extensions/canvas/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/canvas-plugin",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Canvas plugin",
   "type": "module",
  • extensions/cerebras/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/cerebras-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Cerebras provider plugin",
   "type": "module",
  • extensions/chutes/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/chutes-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Chutes.ai provider plugin",
   "type": "module",
  • extensions/clickclack/package.json+2 −2 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/clickclack",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw ClickClack channel plugin",
   "type": "module",
@@ -18,7 +18,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
  • extensions/cloudflare-ai-gateway/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/cloudflare-ai-gateway-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Cloudflare AI Gateway provider plugin",
   "type": "module",
  • extensions/codex/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/codex",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Codex harness and model provider plugin",
   "repository": {
     "type": "git",
@@ -27,10 +27,10 @@
       "minHostVersion": ">=2026.5.1-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/comfy/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/comfy-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw ComfyUI provider plugin",
   "type": "module",
  • extensions/copilot-proxy/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/copilot-proxy",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Copilot Proxy provider plugin",
   "type": "module",
  • extensions/deepgram/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/deepgram-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Deepgram media-understanding provider",
   "type": "module",
  • extensions/deepinfra/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/deepinfra-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw DeepInfra provider plugin",
   "type": "module",
  • extensions/deepseek/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/deepseek-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw DeepSeek provider plugin",
   "type": "module",
  • extensions/diagnostics-otel/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/diagnostics-otel",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw diagnostics OpenTelemetry exporter",
   "repository": {
     "type": "git",
@@ -34,10 +34,10 @@
       "minHostVersion": ">=2026.4.25"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/diagnostics-prometheus/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/diagnostics-prometheus",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw diagnostics Prometheus exporter",
   "repository": {
     "type": "git",
@@ -21,10 +21,10 @@
       "minHostVersion": ">=2026.4.25"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/diffs/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/diffs",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw diff viewer plugin",
   "repository": {
     "type": "git",
@@ -31,10 +31,10 @@
       "minHostVersion": ">=2026.4.30"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1",
+      "openclawVersion": "2026.5.18",
       "staticAssets": [
         {
           "source": "./assets/viewer-runtime.js",
  • extensions/discord/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/discord",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Discord channel plugin",
   "repository": {
     "type": "git",
@@ -21,7 +21,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -65,10 +65,10 @@
       "allowInvalidConfigRecovery": true
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/document-extract/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/document-extract-plugin",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw local document extraction plugin",
   "type": "module",
  • extensions/duckduckgo/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/duckduckgo-plugin",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw DuckDuckGo plugin",
   "type": "module",
  • extensions/elevenlabs/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/elevenlabs-speech",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw ElevenLabs speech plugin",
   "type": "module",
  • extensions/exa/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/exa-plugin",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Exa plugin",
   "type": "module",
  • extensions/fal/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/fal-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw fal provider plugin",
   "type": "module",
  • extensions/feishu/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/feishu",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Feishu/Lark channel plugin (community maintained by @m1heng)",
   "repository": {
     "type": "git",
@@ -17,7 +17,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -48,10 +48,10 @@
       "minHostVersion": ">=2026.4.25"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/file-transfer/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/file-transfer",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw file transfer plugin (file_fetch, dir_list, dir_fetch, file_write)",
   "type": "module",
   "dependencies": {
  • extensions/firecrawl/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/firecrawl-plugin",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Firecrawl plugin",
   "type": "module",
  • extensions/fireworks/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/fireworks-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Fireworks provider plugin",
   "type": "module",
  • extensions/github-copilot/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/github-copilot-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw GitHub Copilot provider plugin",
   "type": "module",
  • extensions/googlechat/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/googlechat",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Google Chat channel plugin",
   "repository": {
     "type": "git",
@@ -17,7 +17,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -75,10 +75,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/google-meet/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/google-meet",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Google Meet participant plugin",
   "repository": {
     "type": "git",
@@ -16,7 +16,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -33,10 +33,10 @@
       "minHostVersion": ">=2026.4.20"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/google/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/google-plugin",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Google plugin",
   "type": "module",
  • extensions/gradium/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/gradium-speech",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Gradium speech plugin",
   "type": "module",
  • extensions/groq/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/groq-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Groq media-understanding provider",
   "type": "module",
  • extensions/huggingface/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/huggingface-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Hugging Face provider plugin",
   "type": "module",
  • extensions/image-generation-core/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/image-generation-core",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw image generation runtime package",
   "type": "module",
  • extensions/imessage/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/imessage",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw iMessage channel plugin using imsg on a signed-in Mac",
   "type": "module",
@@ -40,10 +40,10 @@
       ]
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     }
   },
   "pluginInspector": {
  • extensions/inworld/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/inworld-speech",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Inworld speech plugin",
   "type": "module",
  • extensions/irc/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/irc",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw IRC channel plugin",
   "type": "module",
   "devDependencies": {
  • extensions/kilocode/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/kilocode-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Kilo Gateway provider plugin",
   "type": "module",
  • extensions/kimi-coding/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/kimi-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Kimi provider plugin",
   "type": "module",
  • extensions/line/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/line",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw LINE channel plugin",
   "repository": {
     "type": "git",
@@ -16,7 +16,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -46,10 +46,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/litellm/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/litellm-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw LiteLLM provider plugin",
   "type": "module",
  • extensions/llm-task/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/llm-task",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw JSON-only LLM task plugin",
   "type": "module",
  • extensions/lmstudio/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/lmstudio-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw LM Studio provider plugin",
   "type": "module",
  • extensions/lobster/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/lobster",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "Lobster workflow tool plugin (typed pipelines + resumable approvals)",
   "repository": {
     "type": "git",
@@ -25,10 +25,10 @@
       "minHostVersion": ">=2026.4.25"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/matrix/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/matrix",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Matrix channel plugin",
   "repository": {
     "type": "git",
@@ -22,7 +22,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -87,10 +87,10 @@
       "allowInvalidConfigRecovery": true
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/mattermost/package.json+2 −2 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/mattermost",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Mattermost channel plugin",
   "repository": {
     "type": "git",
@@ -16,7 +16,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
  • extensions/media-understanding-core/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/media-understanding-core",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw media understanding runtime package",
   "type": "module",
  • extensions/memory-core/package.json+2 −2 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/memory-core",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw core memory search plugin",
   "type": "module",
@@ -14,7 +14,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
  • extensions/memory-lancedb/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/memory-lancedb",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw LanceDB-backed long-term memory plugin with auto-recall/capture",
   "repository": {
     "type": "git",
@@ -26,10 +26,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/memory-wiki/package.json+2 −2 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/memory-wiki",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw persistent wiki plugin",
   "type": "module",
@@ -14,7 +14,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
  • extensions/microsoft-foundry/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/microsoft-foundry",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Microsoft Foundry provider plugin",
   "type": "module",
  • extensions/microsoft/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/microsoft-speech",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Microsoft speech plugin",
   "type": "module",
  • extensions/migrate-claude/package.json+2 −2 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/migrate-claude",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "Claude to OpenClaw migration provider",
   "type": "module",
@@ -9,7 +9,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
  • extensions/migrate-hermes/package.json+2 −2 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/migrate-hermes",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "Hermes to OpenClaw migration provider",
   "type": "module",
@@ -12,7 +12,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
  • extensions/minimax/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/minimax-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw MiniMax provider and OAuth plugin",
   "type": "module",
  • extensions/mistral/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/mistral-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Mistral provider plugin",
   "type": "module",
  • extensions/moonshot/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/moonshot-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Moonshot provider plugin",
   "type": "module",
  • extensions/msteams/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/msteams",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Microsoft Teams channel plugin",
   "repository": {
     "type": "git",
@@ -22,7 +22,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -58,10 +58,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/nextcloud-talk/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/nextcloud-talk",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Nextcloud Talk channel plugin",
   "repository": {
     "type": "git",
@@ -12,7 +12,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -44,10 +44,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/nostr/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/nostr",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Nostr channel plugin for NIP-04 encrypted DMs",
   "repository": {
     "type": "git",
@@ -16,7 +16,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -54,10 +54,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/nvidia/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/nvidia-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw NVIDIA provider plugin",
   "type": "module",
  • extensions/oc-path/package.json+2 −2 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/oc-path",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw oc:// workspace path plugin",
   "type": "module",
@@ -15,7 +15,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
  • extensions/ollama/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/ollama-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Ollama provider plugin",
   "type": "module",
  • extensions/openai/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/openai-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw OpenAI provider plugins",
   "type": "module",
  • extensions/opencode-go/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/opencode-go-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw OpenCode Go provider plugin",
   "type": "module",
  • extensions/opencode/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/opencode-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw OpenCode Zen provider plugin",
   "type": "module",
  • extensions/open-prose/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/open-prose",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenProse VM skill pack plugin (slash command + telemetry).",
   "type": "module",
  • extensions/openrouter/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/openrouter-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw OpenRouter provider plugin",
   "type": "module",
  • extensions/openshell/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/openshell-sandbox",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw OpenShell sandbox backend",
   "repository": {
     "type": "git",
@@ -24,10 +24,10 @@
       "minHostVersion": ">=2026.5.12-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1",
+      "openclawVersion": "2026.5.18",
       "bundledDist": false
     },
     "release": {
  • extensions/perplexity/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/perplexity-plugin",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Perplexity plugin",
   "type": "module",
  • extensions/qa-channel/package.json+2 −2 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/qa-channel",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw QA synthetic channel plugin",
   "type": "module",
@@ -19,7 +19,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
  • extensions/qa-lab/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/qa-lab",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw QA lab plugin with private debugger UI and scenario runner",
   "type": "module",
@@ -19,7 +19,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -31,7 +31,7 @@
       "./index.ts"
     ],
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     }
   }
 }
  • extensions/qa-matrix/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/qa-matrix",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Matrix QA runner plugin",
   "type": "module",
@@ -13,7 +13,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -25,7 +25,7 @@
       "./index.ts"
     ],
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     }
   }
 }
  • extensions/qianfan/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/qianfan-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Qianfan provider plugin",
   "type": "module",
  • extensions/qqbot/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/qqbot",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": false,
   "description": "OpenClaw QQ Bot channel plugin",
   "repository": {
@@ -21,7 +21,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -50,10 +50,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/qwen/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/qwen-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Qwen Cloud provider plugin",
   "type": "module",
  • extensions/runway/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/runway-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Runway video provider plugin",
   "type": "module",
  • extensions/searxng/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/searxng-plugin",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw SearXNG plugin",
   "type": "module",
  • extensions/senseaudio/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/senseaudio-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw SenseAudio media-understanding provider",
   "type": "module",
  • extensions/sglang/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/sglang-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw SGLang provider plugin",
   "type": "module",
  • extensions/signal/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/signal",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Signal channel plugin",
   "type": "module",
  • extensions/skill-workshop/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/skill-workshop",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw skill workshop plugin",
   "type": "module",
  • extensions/slack/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/slack",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Slack channel plugin",
   "repository": {
     "type": "git",
@@ -20,7 +20,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -65,10 +65,10 @@
       "allowInvalidConfigRecovery": true
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1",
+      "openclawVersion": "2026.5.18",
       "bundledDist": false
     },
     "release": {
  • extensions/speech-core/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/speech-core",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw speech runtime package",
   "type": "module",
  • extensions/stepfun/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/stepfun-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw StepFun provider plugin",
   "type": "module",
  • extensions/synology-chat/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/synology-chat",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "Synology Chat channel plugin for OpenClaw",
   "repository": {
     "type": "git",
@@ -30,10 +30,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/synthetic/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/synthetic-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Synthetic provider plugin",
   "type": "module",
  • extensions/tavily/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/tavily-plugin",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Tavily plugin",
   "type": "module",
  • extensions/telegram/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/telegram",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Telegram channel plugin",
   "type": "module",
  • extensions/tencent/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/tencent-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Tencent Cloud provider plugin (TokenHub + Token Plan)",
   "type": "module",
  • extensions/tlon/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/tlon",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Tlon/Urbit channel plugin",
   "repository": {
     "type": "git",
@@ -19,7 +19,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -73,10 +73,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/together/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/together-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Together provider plugin",
   "type": "module",
  • extensions/tokenjuice/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/tokenjuice",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "Bundled tokenjuice exec output compaction plugin",
   "type": "module",
   "dependencies": {
  • extensions/tts-local-cli/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/tts-local-cli",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw local CLI TTS plugin",
   "type": "module",
  • extensions/twitch/package.json+3 −3 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/twitch",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Twitch channel plugin",
   "repository": {
     "type": "git",
@@ -27,10 +27,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "channel": {
       "id": "twitch",
  • extensions/venice/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/venice-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Venice provider plugin",
   "type": "module",
  • extensions/vercel-ai-gateway/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/vercel-ai-gateway-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Vercel AI Gateway provider plugin",
   "type": "module",
  • extensions/video-generation-core/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/video-generation-core",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw video generation runtime package",
   "type": "module",
  • extensions/vllm/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/vllm-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw vLLM provider plugin",
   "type": "module",
  • extensions/voice-call/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/voice-call",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw voice-call plugin",
   "repository": {
     "type": "git",
@@ -18,7 +18,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -35,10 +35,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/volcengine/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/volcengine-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Volcengine provider plugin",
   "type": "module",
  • extensions/voyage/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/voyage-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Voyage embedding provider plugin",
   "type": "module",
  • extensions/vydra/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/vydra-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Vydra media provider plugin",
   "type": "module",
  • extensions/webhooks/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/webhooks",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw webhook bridge plugin",
   "type": "module",
  • extensions/web-readability/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/web-readability-plugin",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw local Readability web extraction plugin",
   "type": "module",
  • extensions/whatsapp/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/whatsapp",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw WhatsApp channel plugin",
   "repository": {
     "type": "git",
@@ -19,7 +19,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -62,10 +62,10 @@
       "minHostVersion": ">=2026.4.25"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/xai/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/xai-plugin",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw xAI plugin",
   "type": "module",
  • extensions/xiaomi/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/xiaomi-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Xiaomi provider plugin",
   "type": "module",
  • extensions/zai/package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/zai-provider",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "private": true,
   "description": "OpenClaw Z.AI provider plugin",
   "type": "module",
  • extensions/zalo/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/zalo",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Zalo channel plugin",
   "repository": {
     "type": "git",
@@ -12,7 +12,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -43,10 +43,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • extensions/zalouser/package.json+4 −4 modified
    @@ -1,6 +1,6 @@
 {
   "name": "@openclaw/zalouser",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "OpenClaw Zalo Personal Account plugin via native zca-js integration",
   "repository": {
     "type": "git",
@@ -17,7 +17,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.18-beta.1"
+    "openclaw": ">=2026.5.18"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -54,10 +54,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.18-beta.1"
+      "pluginApi": ">=2026.5.18"
     },
     "build": {
-      "openclawVersion": "2026.5.18-beta.1"
+      "openclawVersion": "2026.5.18"
     },
     "release": {
       "publishToClawHub": true,
  • package.json+1 −1 modified
    @@ -1,6 +1,6 @@
 {
   "name": "openclaw",
-  "version": "2026.5.18-beta.1",
+  "version": "2026.5.18",
   "description": "Multi-channel AI gateway with extensible messaging integrations",
   "keywords": [],
   "homepage": "https://github.com/openclaw/openclaw#readme",

Vulnerability mechanics

Root cause

"Missing validation of identity headers allows local same-host callers to forge trusted-proxy identity headers."

Attack vector

An attacker who has local access to the proxy-facing Gateway port can supply forged identity headers. The advisory describes the flaw as an "identity header validation vulnerability" that allows "local same-host callers to forge trusted-proxy identity headers." By sending crafted HTTP requests containing these forged headers, an attacker can impersonate an operator identity and escalate privileges on the same host. The attack requires no authentication (AV:L/AC:L/PR:N) and is constrained to local same-host callers, meaning the attacker must already have a foothold on the host running OpenClaw.

Affected code

The patch is a release-version bump across all extension package.json files (nostr, google-meet, zalouser, zalo, googlechat, line, whatsapp, matrix, voice-call, feishu). Every file replaces `2026.5.18-beta.1` with `2026.5.18` in version, peerDependencies, compat.pluginApi, and build.openclawVersion fields. No source code changes to the identity header validation logic are present in the diff; the advisory states the vulnerability lies in "identity header validation" in the Gateway component, but the patch does not show the actual fix for that defect.

What the fix does

The provided patch handles only version metadata — it upgrades all extensions from `2026.5.18-beta.1` to `2026.5.18` in their package.json files. The advisory states that the identity header validation vulnerability is fixed in OpenClaw 2026.5.18, but the actual defensive logic (e.g., validating that identity headers originate from a trusted proxy) is not visible in this diff. Because the patch does not contain the security fix itself, the remediation appears to have been included in a separate commit within the same release. Administrators should update to 2026.5.18 to receive the fix.

Preconditions

  • authNo authentication is required (PR:N).
  • networkAttack requires local access to the same host as the proxy-facing Gateway port.
  • configNo special configuration needed beyond running an affected OpenClaw version.
  • inputThe attacker crafts forged identity headers in HTTP requests to the Gateway.

Generated on Jun 12, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

2

News mentions

0

No linked articles in our index yet.