OpenClaw 5.27 Update: Safer Agent, Faster Replies, Steadier Memory

Key Takeaways

• Security: group chat texts are now isolated from the agent's core instruction context, making prompt-injection attacks via group messages harder to execute.
• Fake or risky-looking URLs are now cleaned before processing; dangerous system commands are blocked before execution.
• Big changes (new devices, new permissions) now require admin approval — adds an authorization layer to high-impact operations.
• Performance: past and current chats load faster, tool loading is faster, and the bug where replies stalled waiting on background cleanup jobs is fixed.
• Memory routing is more reliable — the agent holds onto workspace context through the correct tool chain instead of occasionally dropping it.

What Changed and Why It Matters

Security improvements. Prompt attacks work by hiding instructions inside messages the agent reads — group chats are a common vector. This update keeps group message text separate from the agent's core instruction stack, reducing the blast radius of a crafted group message. Combined with URL sanitization and command blocking, the attack surface for a running agent is meaningfully narrowed.

Speed improvements. Two specific bottlenecks are fixed: chat history loading is faster on both past and current sessions, and the bug where reply delivery was blocked by background cleanup jobs is resolved. The overall effect is snappier responses, which matters especially for customer-facing deployments where a slow agent reply loses the user before they finish reading.

Memory stability. OpenClaw's memory system now routes workspace information through the correct tools more reliably — meaning the agent keeps a steadier picture of your business context across sessions without requiring you to re-explain things.

New Pix video provider. OpenClaw can now generate short videos through the Pix provider, adding to the existing set of image and media generation options. The creator notes this is a "genuinely useful" addition for businesses that want social video content but lack the time or staff to produce it manually.

Related on OpenClawDatabase

• OpenClaw Hub — setup, configuration, and guides
• OpenClaw Security Guide — prompt injection, channel security
• Changelog — all tracked OpenClaw releases