{"uuid": "d71c7d31-4e4f-434c-992d-b2e4be67cf78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28480", "type": "seen", "source": "https://gist.github.com/JasonCSJason/fbcd9f9c26ac2d1fe8468c7979845327", "content": "# OpenClaw \u6bcf\u65e5\u7b80\u62a5 \u2014 2026-06-06\n\n## \ud83d\udcdd \u6458\u8981\u603b\u89c8\n\n\u4eca\u5929 OpenClaw \u751f\u6001\u6700\u5927\u7684\u4e24\u4e2a\u770b\u70b9\u9ad8\u5ea6\u8026\u5408\uff1a\u4e00\u662f OpenClaw **2026.6.5 pre-release** \u5728 03:36 UTC \u843d\u5730\uff0c\u4e3b\u6253 QQBot \u63a8\u7406\u6cc4\u9732\u4fee\u590d\u3001MCP \u5de5\u5177\u7ed3\u679c\u786c\u5316\u3001Anthropic extended-thinking \u6062\u590d\u8def\u5f84\u4ee5\u53ca Parallel \u4f5c\u4e3a web_search provider \u7684\u5b98\u65b9\u63a5\u5165\uff1b\u4e8c\u662f **Microsoft Build 2026** \u4e3b\u821e\u53f0\u4e0a Microsoft \u628a\u57fa\u4e8e OpenClaw \u6846\u67b6\u6253\u9020\u7684 always-on agent **Scout** \u7aef\u5230\u4e86\u89c2\u4f17\u9762\u524d\uff0c@steipete \u4eb2\u81ea\u767b\u53f0\u3002Peter Steinberger \u540c\u6b65\u5b98\u5ba3\u52a0\u5165\u65b0\u6210\u7acb\u7684 **OpenClaw Foundation** \u6280\u672f\u6307\u5bfc\u59d4\u5458\u4f1a\uff08TSC\uff09\uff0c\u540c\u65f6\u4ecd\u6302\u7740 OpenAI \u7684\u8eab\u4efd\u3002\n\n\u793e\u533a\u5c42\u9762\u4e5f\u5f88\u70ed\u95f9\uff1a**NanoClaw** \u516c\u5f00\u628a\u77db\u5934\u5bf9\u51c6 OpenClaw \"\u8fd1 50 \u4e07\u884c\u4ee3\u7801 / 70+ \u4f9d\u8d56 / \u5171\u4eab\u5185\u5b58\" \u7684\u653b\u51fb\u9762\uff0c\u4e3b\u6253\u5bb9\u5668\u9694\u79bb\uff1b**Hermes Agent \u684c\u9762\u5e94\u7528**\u5728 6 \u6708 2 \u65e5\u4e0a\u7ebf\u3001\u51e0\u5929\u5185\u88ab\u591a\u5bb6\u81ea\u5a92\u4f53\u62ff\u6765\u8ddf OpenClaw \u5934\u5bf9\u5934\u6bd4\u8f83\uff1b\u4e2d\u6587 IME \u5728 webchat \u8f93\u5165\u5361\u987f\uff08#90800\uff09\u5df2\u5b9a\u4f4d\u5230 root cause\u3001\u4fee\u590d\u65b9\u6848\u5728\u8def\u4e0a\uff1b\u5a01\u80c1\u60c5\u62a5\u5708\u4f20\u51fa **CVE-2026-28480 allowlist bypass**\uff08CVSS 9.4\uff09\u3002\n\n## \ud83d\udd25 \u91cd\u5927\u65b0\u95fb\uff085 \u6761\uff09\n\n1. **Microsoft Scout \u5728 Build 2026 \u53d1\u5e03\uff0c\u57fa\u4e8e OpenClaw \u6846\u67b6**\u3002TechCrunch \u62a5\u9053 Scout \u662f always-on agentic \u52a9\u624b\uff0c\u8dd1\u5728 OpenClaw \u4e4b\u4e0a\uff0c\u7528\u6237\u7ed9\u81ea\u5df1\u7684\u5b9e\u4f8b\u547d\u540d\uff08\u6f14\u793a\u4e2d\u53eb \"Sebastian\"\uff09\u3002\u95e8\u69db\u662f Microsoft Frontier \u8ba1\u5212 + GitHub Copilot \u8ba2\u9605\uff0c\u8de8\u684c\u9762\u4e0e\u6d4f\u89c8\u5668\uff0c\u9884\u88c5\u65e5\u5386 / \u4f1a\u8bae\u8bae\u7a0b\u7b49\u6280\u80fd\u3002\u6700\u5173\u952e\u7684\u5dee\u5f02\u5316\u662f\u5185\u7f6e **policy conformance system**\uff0c\u6bcf\u6b21\u64cd\u4f5c\u5bf9\u7167\u7b56\u7565\u68c0\u67e5\u5e76\u4ea7\u51fa\u5ba1\u8ba1\u8f68\u8ff9\u2014\u2014\u660e\u663e\u662f\u51b2\u7740 2026 \u5e74 2 \u6708\u90a3\u6b21 \"agent \u5728\u6536\u4ef6\u7bb1\u91cc\u8dd1\u98de\" \u4e8b\u4ef6\u7684\u56de\u5e94\u3002\n2. **OpenClaw 2026.6.5 pre-release \u53d1\u5e03**\uff0819 \u5c0f\u65f6\u524d\uff09\u3002\u4fee\u590d QQBot \u628a model reasoning/thinking \u811a\u624b\u67b6\u76f4\u63a5\u6cc4\u9732\u5230\u9891\u9053\uff08#89913\u3001#90132\uff09\uff0c\u628a MCP \u7684 `resource_link`/`resource`/`audio`/\u7578\u5f62 image \u5728 materialize \u8fb9\u754c\u7edf\u4e00\u505a\u5f3a\u5236\u8f6c\u6362\u4ee5\u907f\u514d Anthropic 400 \u4e0e session \u5386\u53f2\u6c61\u67d3\uff08#90710\u3001#90728\uff09\uff0c\u5e76\u4fee\u597d\u4e86 Anthropic extended-thinking stream-start \u7684\u7ade\u6001\u4ee5\u89e6\u53d1\u65e2\u6709\u7684 recovery retry\u3002\n3. **Peter Steinberger \u53cc\u91cd\u8eab\u4efd\u6b63\u5f0f\u751f\u6548**\uff1a\u52a0\u5165 OpenClaw Foundation TSC + \u4ecd\u5728 OpenAI\u3002@TheAgentTimes 6 \u6708 6 \u65e5\u786e\u8ba4\uff1b@msdev \u5f53\u5929\u653e\u51fa \"\u5728 #MicrosoftBuild keynote \u4e0a\u53f0\u548c @steipete \u804a OpenClaw + Windows\" \u7684\u5408\u5f71\u3002Y Combinator Startup School 2026 \u4e5f\u5df2\u7ecf\u628a\u4ed6\u5217\u4e3a OpenClaw \u521b\u59cb\u4eba\u5609\u5bbe\u3002\n4. **CVE-2026-28480 OpenClaw allowlist bypass\uff08CVSS 9.4\uff09** \u88ab @threadlinqs \u4f5c\u4e3a \"THREAT INTEL\" \u63a8\u51fa\uff0c\u5ba3\u79f0\u53ef\u5728 6 \u4e2a channel \u4e0a\u52ab\u6301\u53d7\u4fe1 agent\u3002\u793e\u533a\u6682\u672a\u51fa\u73b0\u5b98\u65b9 advisory \u94fe\u63a5\uff0c\u4f46\u4e0e 2026.6.5 \u4e2d \"auth profiles \u8fc1\u5230 SQLite + \u5b98\u65b9 npm plugin install pinning\" \u7684\u786c\u5316\u65b9\u5411\u65f6\u95f4\u7ebf\u4e00\u81f4\uff0c\u503c\u5f97\u5173\u6ce8\u3002\n5. **NVIDIA SkillSpector \u5168\u9762\u94fa\u5f00**\u3002@dani_avila7 \u5ba3\u5e03 NVIDIA SkillSpector \u5df2\u5408\u5165 Claude Code Templates \u4ed3\u5e93\uff0c\u6240\u6709\u65b0 skill PR \u9ed8\u8ba4\u8d70\u8fd9\u9053\u626b\u63cf\uff1b\u8fd9\u4e5f\u662f OpenClaw 6 \u6708 1 \u65e5 ClawScan\uff08SkillSpector + \u9759\u6001\u5206\u6790 + VirusTotal\uff09\u6d41\u6c34\u7ebf\u7684\u540c\u4e00\u57fa\u7840\u8bbe\u65bd\u3002\n\n## \ud83d\udce6 \u7248\u672c\u66f4\u65b0\n\n**openclaw/openclaw 2026.6.5**\uff08pre-release\uff0c2026-06-06 03:36 UTC\uff09\n\n- QQBot \u63a8\u7406\u6cc4\u9732\u4fee\u590d\uff08#89913\u3001#90132\uff09\n- MCP \u5de5\u5177\u7ed3\u679c\u5728 materialize \u8fb9\u754c\u786c\u5316\uff0c\u8986\u76d6 resource_link / resource / audio / \u7578\u5f62 image / \u672a\u6765\u975e text/image \u5757\uff08#90710\u3001#90728\uff09\n- Anthropic extended-thinking\uff1astream-start \u7b49 `message_start` \u540e\u518d\u5224\u5b9a\uff0cprompt-cache \u8fc7\u671f\u6216 Gateway \u91cd\u542f\u540e\u80fd\u843d\u5165\u65e2\u6709 recovery retry\uff08#90667\u3001#90697\uff09\n- \u65b0 web_search provider\uff1a**Parallel**\uff08PARALLEL_API_KEY \u81ea\u53d1\u73b0\u3001guarded endpoint\u3001cache-safe session id\u3001onboarding \u9009\u62e9\u5668\u3001\u6587\u6863\u9f50\u5907 \u2014 #85158\uff09\n- Google Vertex ADC \u4fee\u590d\uff1a\u9759\u6001\u76ee\u5f55\u884c + runtime model resolution \u6062\u590d\uff0c\u5355 provider cooldown recovery \u4e0e memory-adapter \u72b6\u6001\u68c0\u67e5\u66f4\u7a33\uff08#90506\u3001#90609\u3001#90717\u3001#90816\uff09\n- Matrix\uff1avoice note preflight\u3001thread reads/replies \u5728 relations \u5206\u9875\u4e2d\u4fdd\u7559\uff08#78016\u3001#90415\uff09\n- Auth & plugin install \u6301\u4e45\u5316\uff1aauth profiles \u8fc1 SQLite\uff0c\u5b98\u65b9 npm \u63d2\u4ef6\u4fdd\u7559 trusted pin\uff0cprerelease fallback \u4e0d\u518d\u5e26 stale integrity \u8fdb\u4e0b\u4e00\u4e2a\u7248\u672c\uff08#89102\u3001#88585\uff09\n- macOS node \u6a21\u5f0f\u4e0d\u518d\u4ece\u5065\u5eb7\u76f4\u8fde Gateway \u9759\u9ed8\u5207\u8d70\uff0c\u4f34\u4fa3 App session churn \u663e\u8457\u51cf\u5c11\uff08#90668\u3001#90815\uff09\n- Cron \u65e7 JSON \u5b58\u50a8\u5728 doctor preflight \u671f\u95f4\u8fc1\u79fb\uff1bservice env \u5360\u4f4d\u7b26\u4e0d\u518d\u906e\u853d state-dir secrets\uff1bWhatsApp \u542f\u52a8\u7b49\u5f85\u9650\u65f6\uff08#90072 \u7b49\uff09\n\n\u4e3b\u65cb\u5f8b\uff1a**\u53ef\u9760\u6027 + \u5b89\u5168 + \u591a\u901a\u9053\u6253\u78e8**\uff0c\u5916\u52a0 Parallel \u8fd9\u4e00\u4e2a\u65b0 provider\u3002\n\n## \ud83d\udca5 \u793e\u5a92\u7206\u6b3e\n\n**Twitter / X \u5934\u90e8\u7ebf**\n\n- **@msdev** \u5f53\u65e5\u6700\u5177\u4f20\u64ad\u529b\u7684\u4e00\u6761\uff1a\"During the #MicrosoftBuild keynote, @steipete joined us on stage to talk all things OpenClaw and Windows\"\u2014\u2014204 likes / 4 replies\u3002\u8fd9\u6761\u662f OpenClaw \u5728 Build \u4e3b\u4f1a\u573a\u4e0a \"\u76d6\u7ae0\" \u7684\u753b\u9762\u8bc1\u636e\uff0c\u6ce8\u91ca\u91cc\u8ba8\u8bba\u96c6\u4e2d\u5728 Scout \u8d70 Entra ID\u3001\u6574\u5957\u6808\u5b8c\u5168\u8dd1\u5728 Microsoft \u5185\u90e8\u4e0a\uff0c\u5bf9 OpenClaw \u7684 \"\u975e Microsoft \u6240\u6709\" \u5b9a\u6027\u4ea7\u751f\u5206\u6b67\u3002\n- **@OmarShahine**\uff08Microsoft VP\uff0cScout \u4e3b\u63a8\u624b\uff09\u53d1\u4e86\u4e24\u6761\uff1a\u7b2c\u4e00\u6761 \"I asked Sebastian, my Microsoft Scout, what it's like to be the first Scout in the World, and to be introduced at #MicrosoftBuild\"\uff0c\u628a Scout \u62df\u4eba\u5316\u505a\u5f62\u8c61\u5305\u88c5\uff1b\u7b2c\u4e8c\u6761\u5bf9 OpenClaw Foundation \u7684\u795d\u8d3a\u2014\u2014\"It's awesome to see such talented people find new career and opportunity working for the OpenClaw foundation. The story of @openclaw is much more than just...\"\uff0c\u628a OpenAI \u6536\u4eba\u548c Foundation \u6210\u7acb\u653e\u8fdb\u540c\u4e00\u4e2a\u53d9\u4e8b\u91cc\u3002\n- **@leoobai**\uff1a\"Microsoft just unveiled Scout, a new AI assistant built on OpenClaw. Big signal: AI assistants are moving from 'chat with me' to 'help me get things done.'\"\u2014\u2014\u628a Scout \u5f53\u6210 agent \u8303\u5f0f\u4ece chat \u8d70\u5411 do \u7684\u5173\u952e\u8282\u70b9\u89e3\u8bfb\uff0c\u88ab\u591a\u4e2a\u4e8c\u521b\u8d26\u53f7\u8f6c\u53d1\u3002\n- **@itscolebennet**\uff1a\u53d1\u5e03\u5f53\u65e5\u7684\u5f00\u53d1\u8005\u4fa7\u53cd\u5e94\uff0c\"OpenClaw 2026.6.5 beta 1 is out. I like releases that make agent ops less ambiguous: fewer mystery states, clearer handoffs, better proof across tools.\"\u2014\u2014 \u5f3a\u8c03\u8fd9\u6b21\u66f4\u65b0\u5bf9 agent ops \u53ef\u89c2\u6d4b\u6027\u7684\u4ef7\u503c\u3002\n- **@dani_avila7** \u4e09\u8fde\u63a8\uff1a\"NVIDIA's Skillspector is now integrated into the Claude Code Templates repo. All new skill PRs are protected by this security scanner for AI agent skills\"\uff0c\u5e76\u9644\u4e0a PR \u8f93\u51fa\u622a\u56fe\u548c NVIDIA/SkillSpector \u4ed3\u5e93\u94fe\u63a5\u3002\u8fd9\u662f OpenClaw 6 \u6708 1 \u65e5\u53d1\u5e03\u7684 ClawScan \u6d41\u6c34\u7ebf\u5728\u66f4\u5e7f agent skill \u751f\u6001\u7684 \"\u5916\u6ea2\" \u8bc1\u636e\u3002\n- **@vigilcodes**\uff1a\"VIGIL is now live across the agent ecosystem \ud83d\udee1\ufe0f Merged into ClawHub. 11 read-only security tools. any agent can scan before it signs.\"\u2014\u2014\u4e00\u7ec4 11 \u4ef6\u5957\u53ea\u8bfb\u5b89\u5168\u5de5\u5177\u4e0a\u67b6 ClawHub\uff0c\u628a OpenClaw \u7684 skill \u751f\u6001\u8fdb\u4e00\u6b65\u63a8\u5411 \"\u7b7e\u524d\u81ea\u68c0\" \u7684\u5b89\u5168\u60ef\u4f8b\u3002\n- **@threadlinqs**\uff1a\u8d1f\u9762\u51b2\u51fb\u6e90\u3002\"THREAT INTEL: OpenClaw allowlist bypass (CVE-2026-28480, CVSS 9.4) hijacks trusted AI agents across 6 channels.\"\u2014\u2014\u7ec6\u8282\u5c1a\u672a\u5728\u5b98\u65b9 advisory \u51fa\u73b0\uff0c\u503c\u5f97\u540e\u7eed\u8ddf\u8e2a\u3002\n- **@conoro** \u662f\u4eca\u5929\u6700\u5177\u4f53\u7684 \"\u7528\u6237\u771f\u5b9e\u4ef7\u503c\" \u6848\u4f8b\uff1a\"Real valuable win from an @openclaw automation. I've had it watching eBay for cheap RTX3060 cards without much luck. This week I got it to monitor @vinted...\"\u2014\u2014\u4e00\u6761\u5e73\u5b9e\u7684\u7701\u94b1\u6545\u4e8b\uff0c\u88ab\u591a\u4e2a\u56fd\u5bb6\u7684\u5c0f\u8d26\u53f7\u8f6c\u53d1\uff0c\u6bd4\u4efb\u4f55 \"agent \u6539\u53d8\u4e16\u754c\" \u7684\u53e3\u53f7\u90fd\u6253\u52a8\u4eba\u3002\n- **@palewire**\uff08Ben Welsh\uff0c\u8bb0\u8005\uff09\uff1a\"My screwy OpenClaw launched a new news app.\"\u2014\u2014OpenClaw \u5728\u65b0\u95fb\u4e1a\u6d41\u6c34\u7ebf\u91cc\u6084\u6084\u51fa\u73b0\u7684\u5c0f\u4f8b\u5b50\uff1b\"screwy\" \u8fd9\u4e2a\u7528\u8bcd\u4ee3\u8868\u7528\u6237\u771f\u5b9e\u5730\u628a OpenClaw \u5f53\u6210 \"\u4e0d\u5b8c\u7f8e\u4f46\u53ef\u6539\" \u7684\u5de5\u5177\u3002\n- **@alex**\uff1a\"openclaw, i do not miss u at this pt in time.\"\u2014\u2014885 \u6d4f\u89c8\u7684\u8d1f\u9762\u77ed\u53e5\uff0c\u63d0\u793a churn \u4e5f\u5728\u53d1\u751f\u3002\n- \u4e2d\u6587\u5708\uff1a**@linglingfa** \u63d0\u9192 \"OpenClaw \u8fd9\u79cd\u8f6f\u4ef6\u6562\u8ba9\u522b\u4eba\u52a8\u624b\u4ee3\u529e\uff0c\u53ea\u89c9\u5f97\u6bdb\u9aa8\u609a\u7136\"\uff0c\u53cd\u5bf9\u628a\u4ee3\u88c5\u670d\u52a1\u5356\u7ed9\u5c0f\u767d\u7528\u6237\uff0c\u662f\u8fd9\u6ce2 Build \u6d41\u91cf\u8fdb\u5165\u4e2d\u6587\u793e\u7fa4\u7684\u526f\u4f5c\u7528\u3002\n- **@DWFLabs**\uff1a\"OpenClaw is the clearest contrast, with its ClawHub marketplace hosting numerous community plugins, including self-improvement related skills.\"\u2014\u2014 \u628a ClawHub \u89c6\u4e3a OpenClaw \u533a\u522b\u4e8e Hermes \u7684\u62a4\u57ce\u6cb3\u3002\n\n**Reddit r/openclaw \u70ed\u5e16\uff08\u8fd1 24 \u5c0f\u65f6\uff09**\n\n- *Killer use case* (1ty5f4l)\uff1a\u7528\u6237\u5217\u4e3e OpenClaw \"\u6e05\u6536\u4ef6\u7bb1\u3001\u53d1\u90ae\u4ef6\u3001\u7ba1\u65e5\u5386\u3001\u529e\u767b\u673a\"\uff0c\u8bc4\u8bba\u533a\u6f14\u5316\u6210 \"\u6211\u7528 OpenClaw \u8dd1\u4e86\u4ec0\u4e48\u7701\u94b1\u573a\u666f\" \u7684 show & tell\u3002\n- *Open AI sign-in = security risk?* (1tyjebc)\uff1a\u8d28\u7591 OpenAI \u767b\u5f55\u662f\u4e0d\u662f\u628a\u4fe1\u4efb\u9762\u6269\u5927\uff1b\u8bc4\u8bba\u533a\u4e3b\u6d41\u56de\u590d\u6307\u5411 2026.6.5 \u628a auth profile \u79fb\u5230 SQLite \u8fd9\u6761\u66f4\u65b0\u3002\n- *Best local Ollama model for OpenClaw tool use with ~12GB RAM* (1tyhge7)\uff1a\u672c\u5730\u6a21\u578b + tool-use \u53ef\u9760\u6027\u7684\u786c\u521a\u95ee\u9898\uff0cOmniCoder2 \u88ab\u591a\u4eba\u63a8\u8350\u4e3a\u5f53\u524d 12GB \u6863\u6700\u7a33\u3002\n- *Brand new install problems with Ollama Cloud Models* (1tykb8a)\uff1aclean install \u5728 Mac mini \u4e0a\u4ecd\u5361\uff0c\u91cd\u73b0\u7387\u63d0\u793a\u5b89\u88c5\u8def\u5f84\u8fd8\u6709\u7c97\u7cd9\u8fb9\u7f18\u3002\n- *Has there been a breaking change with openai OAuth?* (1ty66jv)\uff1a\u9ad8\u8d5e\u56de\u590d\u6307\u51fa \"\u4f60\u6062\u590d\u7684\u5907\u4efd\u91cc\u5f88\u53ef\u80fd\u542b\u5df2\u7528\u8fc7\u7684 Codex OAuth refresh token\uff0c\u6216\u8005\u591a\u4e2a OpenClaw/Codex harness \u8fdb\u7a0b\u5728\u5237\u65b0\u540c\u4e00\u4e2a profile\"\u2014\u2014\u8fd9\u6761\u5177\u4f53\u8bca\u65ad\u672c\u8eab\u5df2\u88ab\u6536\u5165\u793e\u533a FAQ\u3002\n- *Showcase Weekend! \u2014 Week 22, 2026* (1ty7xnq)\uff1a\u6bcf\u5468\u56fa\u5b9a\u7684\u4f5c\u54c1\u79c0\uff0c\u672c\u5468\u4eae\u70b9\u96c6\u4e2d\u5728 multi-channel + \u957f\u4efb\u52a1 cron \u7f16\u6392\u3002\n\n**Hacker News\uff0824 \u5c0f\u65f6\uff09**\n\n- *Microsoft launches Scout, an OpenClaw-inspired personal assistant*\uff08TechCrunch\uff0cHN id 48425945\uff09\uff1a3 points / 1 comment\u2014\u2014HN \u4e0a\u5bf9\u8fd9\u4e2a\u65b0\u95fb\u7684\u70ed\u5ea6\u5e76\u4e0d\u9ad8\uff0c\u8bba\u575b\u4e3b\u6d41\u8bc4\u8bba\u51b7\u9759\u5730\u6307\u51fa \"Scout \u628a OpenClaw \u5305\u8fdb Microsoft \u4fe1\u4efb\u8fb9\u754c\uff0c\u4f46\u4e0d\u662f Microsoft \u81ea\u5df1\u9020\u51fa\u6765\u7684\"\u3002\n- *Every AI Agent Feature Is a Cache Invalidation Surface*\uff08openclacky.com\uff09\uff1a2 points / 0 comments\uff0c\u5de5\u7a0b\u89d2\u5ea6\u7684\u4e00\u7bc7 cache \u5931\u6548 + agent \u601d\u8003\u7684\u968f\u7b14\uff0c\u6587\u7ae0\u5728\u7528 OpenClaw \u7684 URL \u98ce\u683c\u505a\u9690\u55bb\uff0c\u5e76\u4e0d\u662f\u5b98\u65b9\u6587\u3002\n- *Hermes \u2013 Community Web UI with Agent*\uff08get-hermes.ai\uff09\uff1a6 \u6708 6 \u65e5 19:16 UTC \u4e0a\u699c\uff0c\u786e\u8ba4 Hermes \u73b0\u5728 HN \u4e0a\u540c\u6837\u6709\u58f0\u91cf\u3002\n- *Why Aren't We Measuring How AI Affects Humans?*\uff08IEEE Spectrum\uff09\uff1a22:54 UTC \u4e0a\u699c\uff0c\u80cc\u666f AI \u653f\u7b56\u8ba8\u8bba\u5728\u5347\u6e29\u3002\n\n\u793e\u533a\u60c5\u7eea\u6574\u4f53\u503e\u5411\uff1a\"**Build \u4e0a\u7684\u76d6\u7ae0 + 2026.6.5 \u5b9e\u8d28\u5185\u5bb9 + Foundation \u843d\u5b9a**\" \u5f62\u6210\u6b63\u5faa\u73af\uff0c\u4f46 CVE-2026-28480 \u4e0e NanoClaw \u7684 \"isolation \u4e0d\u591f\" \u653b\u51fb\u662f\u8fd9\u5468\u7684\u4e24\u6839\u53cd\u5411\u652f\u67f1\u3002\n\n## \ud83d\udc26 \u4eba\u7269\u52a8\u6001\n\n- **Peter Steinberger / @steipete**\uff1a\u8eab\u4efd\u5207\u6362\u5230 \"Polyagentmorous ClawFather. Came back from retirement to mess with AI and help a lobster take over the world. @OpenClaw\ud83e\udd9e + @OpenAI\"\u3002\u5f53\u524d 534k \u5173\u6ce8\u300114 \u4e07\u53d1\u63a8\u3002\u4eca\u65e5\u52a8\u4f5c\uff1a\u767b Build keynote\u3001\u52a0\u5165 OpenClaw Foundation TSC\u3001@Striatum_ai \u900f\u9732\u4ed6\u7ee7\u7eed dependency purge \u2014\u2014 \u7528 photon\uff08Rust \u7f16\u51fa\u7684 WebAssembly\uff09\u66ff\u6362 Sharp \u548c Jimp\u3002\n- **@OpenClaw \u5b98\u53f7**\uff1a539k \u5173\u6ce8\u3001777 \u6761\u63a8\u6587\uff08\u5c11\u800c\u7cbe\uff09\u3002\u7b80\u4ecb\u66f4\u65b0\u4e3a \"New shell, same lobster soul\"\u3002\n- **@OmarShahine**\uff1a\u628a Scout \u62df\u4eba\u5316\u63a8\u5411\u5927\u4f17\uff0c\u5e76\u5728 OpenClaw Foundation \u6210\u7acb\u65f6\u516c\u5f00\u7ad9\u53f0\u3002\n- **Andrej Karpathy / @karpathy**\uff1a\u4eca\u5929\u6ca1\u6709\u76f4\u63a5 OpenClaw \u5185\u5bb9\uff0c\u4f46 @raunak_yadush \u628a \"@steipete = built openclaw\" \u5217\u5165 \"AI \u5fc5\u5173\u6ce8 15 \u4eba\" \u540c\u540d\u699c\u5355\uff0c\u4e0e karpathy \u540c\u5217\u3002\n- **@kilocode**\uff1a\"3M+ Kilo Coders. Open source since day one!\"\u2014\u2014\u540c\u751f\u6001\u53e6\u4e00\u4e2a\u5f00\u6e90 agent \u5e73\u53f0\uff0c\u6b63\u5728\u62a2 dev \u5fc3\u667a\u4efd\u989d\u3002\n\n## \ud83d\udee0 GitHub\n\n- **openclaw/openclaw 2026.6.5 pre-release**\uff1a\u89c1\u4e0a\u3002\n- **Issue #90800\uff08\u4e2d\u6587 IME \u5728 webchat \u8f93\u5165\u5361\u987f\uff09**\uff1awebchat Control UI\uff08local gateway :18432\uff09\uff0cChrome / Safari\u3001macOS \u590d\u73b0\u3002Root cause\uff1atextarea auto-resize handler \u5728\u6bcf\u4e2a `input` \u4e8b\u4ef6\u4e2d\u540c\u6b65\u89e6\u53d1\u5e03\u5c40\u56de\u6d41\uff08scrollHeight \u8bfb + style.height \u5199\uff09\u3002\u4e2d\u6587 IME \u5728 composition \u671f\u95f4\u6bcf\u4e2a\u62fc\u97f3\u952e\u90fd\u89e6\u53d1 input\uff0c\u5bfc\u81f4\u6bcf\u5e27\u591a\u6b21\u5f3a\u5236 reflow\uff0c\u963b\u585e IME composition \u7ebf\u7a0b\uff0c\"\u5e02\u573a\" \u8fd9\u79cd\u5b57\u5ef6\u8fdf\u53ef\u89c1\u3002\u5efa\u8bae\u65b9\u6848\uff1a\u7528 `requestAnimationFrame` \u628a resize \u5408\u5e76\u5230\u4e00\u5e27\u4e00\u6b21\u3002Reporter \u6ce8\u91ca\uff1aDeepFund\uff08\u57fa\u4e8e OpenClaw \u7684 agent\uff09\u5df2\u7ecf\u8e29\u8fc7\u540c\u4e00\u4e2a\u5751\u5e76\u4fee\u8fc7\u3002\u5f53\u524d 2026.6.5 highlights \u4e2d\u672a\u5305\u542b\u6b64\u4fee\u590d\u3002\n- **openclaw/clawhub**\uff1askill / plugin registry\uff0c\u4eca\u65e5\u91cd\u70b9\u662f ClawScan + SkillSpector + VirusTotal \u4e09\u4ef6\u5957\u5df2\u6210\u4e3b\u7ebf\u3002\n- **CherryHQ/cherry-studio #15726**\uff1a\u7b2c\u4e09\u65b9 Cherry Studio \u4e0d\u80fd\u81ea\u52a8\u66f4\u65b0\u5185\u7f6e OpenClaw \u96c6\u6210\uff0c\u793e\u533a\u547c\u5401 \"\u624b\u52a8 / \u81ea\u52a8\u66f4\u65b0\u652f\u6301\"\u3002\n- **freddy-schuetz/n8n-claw**\uff1an8n \u628a\u7f16\u7801\u4efb\u52a1\u59d4\u6258\u7ed9 OpenClaw \u7684\u793e\u533a\u96c6\u6210\u3002\n- **volcengine/OpenViking**\uff1a\u706b\u5c71\u5f15\u64ce\u5f00\u6e90\u3001\u4e13\u4e3a AI Agent\uff08\u660e\u786e\u70b9\u540d OpenClaw\uff09\u505a\u7684 context \u6570\u636e\u5e93\uff1b\u7edf\u4e00\u7ba1\u7406 memory / context\u3002\n- **openagents-org/openagents**\uff1a\"Any agent, one workspace \u2014\u2014 \u628a Claude Code\u3001OpenClaw\u3001Codex CLI\u3001Cursor \u63a5\u5230\u540c\u4e00\u4e2a workspace \u5171\u4eab context\"\u3002\n\n## \u2694\ufe0f \u7ade\u54c1\n\n- **NanoClaw\uff08nanocoai/nanoclaw\uff09**\uff1a\u81ea\u6211\u5b9a\u4f4d \"OpenClaw \u7684\u8f7b\u91cf\u66ff\u4ee3\u54c1\uff0c\u8dd1\u5728\u5bb9\u5668\u91cc\u4ee5\u6c42\u5b89\u5168\"\u3002\u5176\u63a8\u5e7f\u6587\u6848\u76f4\u63a5\u653b\u51fb OpenClaw \"\u8fd1 50 \u4e07\u884c\u4ee3\u7801 / 53 \u914d\u7f6e\u6587\u4ef6 / 70+ \u4f9d\u8d56\u3002\u5b89\u5168\u9760 application level\uff08allowlist\u3001\u914d\u5bf9\u7801\uff09\uff0c\u800c\u4e0d\u662f\u771f\u6b63\u7684 OS \u7ea7\u9694\u79bb\u3002\u6240\u6709\u4e1c\u897f\u8dd1\u5728\u4e00\u4e2a Node \u8fdb\u7a0b\u91cc\u3001\u5171\u4eab\u5185\u5b58\"\u3002NanoClaw \u628a Claude agent \u8dd1\u5728\u4e13\u7528 Linux \u5bb9\u5668\u91cc\u3001\u7528 `bash nanoclaw.sh` \u4e00\u6761\u547d\u4ee4\u81ea\u4e3e\uff08\u81ea\u52a8\u88c5 Node\u3001pnpm\u3001Docker\uff0c\u767b\u8bb0 Anthropic \u51ed\u636e\uff0c\u8fde\u63a5 Telegram/Discord/WhatsApp/CLI \u901a\u9053\uff0c\u5931\u8d25\u65f6\u81ea\u52a8\u8c03 Claude Code \u8bca\u65ad\uff09\u3002\u57fa\u4e8e Anthropic Agents SDK\uff0cchannel \u8986\u76d6 WhatsApp / Telegram / Slack / Discord / Gmail\uff0c\u542b memory + scheduled jobs\u3002\n- **Hermes Agent**\uff08Nous Research\uff09\uff1a6 \u6708 2 \u65e5\u53d1\u684c\u9762\u5e94\u7528 v0.15.2 public preview\uff0c\u652f\u6301 macOS / Windows / Linux\u3002Medium \u6587\u7ae0\u5ba3\u79f0 \"\u4e0a\u7ebf 4 \u4e2a\u6708\u5c31 18 \u4e07 + GitHub stars\uff0c2026 \u589e\u901f\u6700\u5feb\u7684\u5f00\u6e90 agent \u6846\u67b6\"\uff0c\u5e76\u628a Hermes \u4e0e OpenClaw \"374k+ stars\" \u5bf9\u6bd4\uff1b\u81ea\u6211\u5b9a\u4f4d\u662f stateful + self-improving\uff0cpost-task evaluation \u62bd\u79bb\u63a8\u7406\u8303\u5f0f\u6210 Markdown skill \u6587\u4ef6\uff08SQLite FTS + LLM summarization\uff09\uff0c\u58f0\u79f0 20+ \u81ea\u521b skill \u540e\u7c7b\u4f3c\u4efb\u52a1\u5feb 40%\uff08TokenMix benchmark, Apr 2026\uff09\u3002\u6700\u5927\u5dee\u5f02\u70b9\uff1a**Hermes \u81ea\u5e26\u4e00\u624b GUI \u684c\u9762 App\uff1bOpenClaw \u4ecd\u4ee5 gateway / \u591a channel \u4e3a\u4e3b\u8f74**\u3002\n- **Microsoft Scout**\uff1a\u88ab\u5b9a\u4f4d\u4e3a OpenClaw \u5728\u4f01\u4e1a\u5185\u7684 \"\u53d7\u63a7\u7248\u672c\"\u2014\u2014audit trail + Entra ID + Frontier \u8ba1\u5212\u95e8\u69db\uff1b\u4fa7\u9762\u627f\u8ba4 OpenClaw \u6846\u67b6\u7684\u6709\u6548\u6027\u3002\n- **Devin Desktop**\uff08\u539f Windsurf\uff09\uff1a\u521a\u521a\u5ba3\u5e03\u4ece Windsurf \u6539\u540d\u4e3a Devin Desktop\uff0c\u5e76\u5bf9\u5916\u5f00\u653e **ACP\uff08Agent Client Protocol\uff09**\u2014\u2014\u4efb\u4f55 ACP \u517c\u5bb9 agent \u90fd\u80fd\u63d2\u8fdb Devin Desktop\uff0cDevin Desktop \u4e5f\u80fd\u4f5c\u4e3a host \u62c9\u8d77\u4efb\u4f55 ACP agent\u3002\u8fd9\u662f\u76f4\u63a5\u51b2 OpenClaw \"\u628a\u4efb\u4f55 agent \u63a5\u5230\u4efb\u4f55 channel\" \u7684\u5b9a\u4f4d\u3002\n- **WeSight**\uff1a\u684c\u9762 AI Agent workspace\uff0c\u4e3b\u6253 \"\u5728\u4e00\u4e2a\u53ef\u89c6\u5316 App \u91cc\u540c\u65f6\u8dd1 Claude Code\u3001Codex\u3001OpenClaw\u3001Hermes\"\uff0c\u628a OpenClaw \u5f53\u4f5c\u5176\u4e2d\u4e00\u79cd agent runtime\u3002\n\n## \ud83c\udf10 \u884c\u4e1a\n\n- **OpenRouter** \u516c\u5f00\u7ef4\u62a4 \"Top AI Models Used by OpenClaw\" collection\uff0cOpenClaw \u5df2\u7ecf\u6210\u4e3a OpenRouter \u7684\u53ef\u53d1\u73b0\u4f7f\u7528\u7c7b\u76ee\u3002\n- **Hostinger hPanel** \u628a OpenClaw \u5217\u4e3a\u4e00\u952e\u5e94\u7528\uff1b**Umbrel App Store** \u540c\u6837\u4e0a\u67b6\u3002\n- **roadmap.sh** \u63a8\u51fa \"How to Install OpenClaw\" \u6307\u5357\u4e0e \"Claude Code vs Cursor\" \u5bf9\u6bd4\u9875\uff0cOpenClaw \u5df2\u662f roadmap \u7684\u5e38\u9a7b\u6761\u76ee\u3002\n- **The New Stack**\uff1a\u518d\u8d77 \"OpenClaw used Gavriel Cohen's code and exposed the AI Agent accountability problem\" \u65e7\u95fb\u2014\u2014\u5f00\u53d1\u8005\u53d1\u73b0\u81ea\u5df1\u7684\u4ee3\u7801\u51fa\u73b0\u5728 OpenClaw \u4e2d\u3001\u5f15\u51fa agent \u6846\u67b6\u7684\u4ee3\u7801 attribution \u95ee\u9898\uff1b\u672c\u5468\u4ecd\u7136\u5728\u88ab\u591a\u5bb6\u81ea\u5a92\u4f53\u590d\u7528\uff0c\u662f\u60ac\u800c\u672a\u51b3\u7684\u8206\u60c5\u98ce\u9669\u3002\n- **AI Engineer @aiDotEngineer**\uff1a\"OpenClaw hit 3,000 commits in a single day. 10 to 15 maintainers. All with day jobs. @vincent_koc (Chief Architect of OpenClaw) explains how the factory\u2026\"\u2014\u2014\u628a OpenClaw \u7684\u9ad8\u541e\u5410\u8d21\u732e\u6d41\u7a0b\u4f5c\u4e3a\u53ef\u501f\u9274 OSS \u8303\u672c\u3002\n- **Memori Labs**\uff1a\u5ba3\u4f20 \"Memori + OpenClaw \u7ed9 agent \u8de8 session/workflow \u6301\u4e45\u8bb0\u5fc6\" \u7684\u7ec4\u5408\u5356\u6cd5\uff0c\u662f\u7b2c\u4e09\u65b9 memory \u5c42\u4e0e OpenClaw \u96c6\u6210\u7684\u4ee3\u8868\u6848\u4f8b\u3002\n- **YouTube \u751f\u6001**\uff1a\u4eca\u65e5\u76f8\u5173\u89c6\u9891\u6db5\u76d6 \"OpenClaw just got way easier\"\uff08Forward Future\uff0c\u4e0e Perplexity Computer \u8054\u52a8\uff09\u3001\"Codex vs Claude Code vs OpenClaw\"\u3001\"AI Agents for Home Assistant: OpenClaw vs Hermes\"\uff0c\u5a31\u4e50\u5316\u5185\u5bb9\u4e5f\u5728\u5927\u91cf\u4ea7\u51fa\u3002\n", "creation_timestamp": "2026-06-06T23:13:33.000000Z"}