OpenClaw versions up to 2026.3.28 have an information disclosure vulnerability in the Gateway Control Interface. This flaw allows exposure of version and assistant agent ID via the Control UI bootstrap JSON, which is considered low-severity fingerprinting or information disclosure. The issue is fixed in version 2026.3.31.