OpenClaw v2026.4.9: Dreaming with REM Backfill, Diary Timeline UI, Security Hardening & Android Pairing Overhaul

OpenClaw released version v2026.4.9 today, marking a significant milestone in personal AI agent capabilities. The headline feature — Dreaming with REM Backfill — lets the agent retrospectively fill memory gaps using historical REM harness data, improving continuity and enabling richer contextual storytelling. Paired with a new Diary Timeline UI, users can now review chronological dream logs and agent reflections in a navigable, audit-friendly view — a feature that doubles as both personal journaling and enterprise transparency tooling.

Security hardening is a major theme of this release. The team addressed SSRF (Server-Side Request Forgery) vulnerabilities in the browser by re-running blocked-destination safety checks after interaction-driven navigations. Node exec injection vectors were also tightened, blocking runtime-control env vars and unsafe URL-style browser control overrides from untrusted workspace .env files.

The release also introduces Character-vibes QA evaluations — a behavioral consistency testing framework for model selection and parallel runs, enabling teams to evaluate how well agent personas align with brand guidelines. Finally, the Android pairing overhaul streamlines device-agent connectivity for mobile-first workflows.

Key contributors include @mbelinky (dreaming/diary UI) and @eleqtrizit (security hardening), among others.

Source: GitHub Release Notes | OpenClaw on X