### Fixes

- Security/Windows ACL audit: classify Anonymous Logon, Guests, Interactive, Local, and Network SIDs as world-equivalent principals so broadly writable paths stay critical instead of being downgraded to group-writable. Fixes #74350. (#74383) Thanks @dwc1997.

- Media-understanding: retry transient remote attachment fetch failures before audio or vision processing, so Discord voice notes are not lost after one network/CDN blip. Fixes #74316. Thanks @vyctorbrzezowski and @gabrielexito-stack.

- Control UI: order timestamped live stream and tool items before untimestamped history fallbacks, keeping chat history in visible time order. Fixes #80759. (#81016) Thanks @akrimm702.

- iMessage: stop sending visible `<media:image>` placeholder text for media-only native image sends while preserving the internal echo key that prevents self-echo duplicate replies. (#81209) Thanks @homer-byte.

diff --git a/dist/permissions.js b/dist/permissions.js

index 67df110..445b04d 100644

--- a/dist/permissions.js

+++ b/dist/permissions.js

@@ -12,6 +12,15 @@ const WORLD_PRINCIPALS = new Set([

"builtin\\users",

"authenticated users",

"nt authority\\authenticated users",

+ "anonymous logon",

+ "nt authority\\anonymous logon",

+ "guests",

+ "builtin\\guests",

+ "interactive",

+ "nt authority\\interactive",

+ "network",

+ "nt authority\\network",

+ "local",

]);

const TRUSTED_BASE = new Set([

"nt authority\\system",

@@ -31,7 +40,16 @@ const TRUSTED_SIDS = new Set([

"s-1-5-32-544",

"s-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464",

]);

-const WORLD_SIDS = new Set(["s-1-1-0", "s-1-5-11", "s-1-5-32-545"]);

+const WORLD_SIDS = new Set([

+ "s-1-1-0",

+ "s-1-5-11",

+ "s-1-5-32-545",

+ "s-1-5-7",

+ "s-1-5-32-546",

+ "s-1-5-4",

+ "s-1-2-0",

+ "s-1-5-2",

+]);

const STATUS_PREFIXES = [

"successfully processed",

"processed",

@@ -202,6 +220,8 @@ function buildTrustedPrincipals(env) {

}

}

const userSid = normalizeSid(env?.USERSID ?? "");

+ // Guard: never add any world-equivalent SID to the trusted set, even if

+ // USERSID is set to one by a malicious process.

if (userSid && SID_RE.test(userSid) && !WORLD_SIDS.has(userSid)) {

trusted.add(userSid);

}

"prism-media>opusscript": "^0.0.8 || ^0.1.1"

patchedDependencies:

"@openclaw/fs-safe@0.2.2": "patches/@openclaw__fs-safe@0.2.2.patch"

"baileys@7.0.0-rc11": "patches/baileys@7.0.0-rc11.patch"

"@agentclientprotocol/claude-agent-acp@0.33.1": "patches/@agentclientprotocol__claude-agent-acp@0.33.1.patch"

),

).toBe(true);

})(),

(async () => {

const tmp = await tempCases.makeTmpDir("win-anon-world");

const stateDir = path.join(tmp, "state");

await fs.mkdir(stateDir, { recursive: true });

const configPath = path.join(stateDir, "openclaw.json");

await fs.writeFile(configPath, "{}\n", "utf-8");

const findings = await collectFilesystemFindings({

stateDir,

configPath,

platform: "win32",

env: windowsAuditEnv,

execIcacls: async (_cmd: string, args: string[]) => {

const target = args[0];

if (target.endsWith(`${path.sep}state`)) {

return {

stdout: `${target} *S-1-5-18:(F)\n *S-1-5-7:(F)\n`,

stderr: "",

};

}

return {

stdout: `${target} *S-1-5-18:(F)\n DESKTOP-TEST\\Tester:(F)\n`,

stderr: "",

};

},

});

expect(

findings.some(

(finding) =>

finding.checkId === "fs.state_dir.perms_world_writable" &&

finding.severity === "critical",

),

).toBe(true);

expect(

findings.some((finding) => finding.checkId === "fs.state_dir.perms_group_writable"),

).toBe(false);

})(),

]);

});

});

],

expected: { untrustedWorld: 1 },

},

{

name: "Anonymous Logon SID (S-1-5-7) is world, not group",

entries: [

aclEntry({

principal: "*S-1-5-7",

rights: ["R"],

rawRights: "(R)",

canRead: true,

canWrite: false,

}),

],

expected: { untrustedWorld: 1 },

},

{

name: "BUILTIN\\\\Guests SID (S-1-5-32-546) is world, not group",

entries: [

aclEntry({

principal: "*S-1-5-32-546",

rights: ["R"],

rawRights: "(R)",

canRead: true,

canWrite: false,

}),

],

expected: { untrustedWorld: 1 },

},

{

name: "Interactive SID (S-1-5-4) is world, not group",

entries: [

aclEntry({

principal: "*S-1-5-4",

rights: ["R"],

rawRights: "(R)",

canRead: true,

canWrite: false,

}),

],

expected: { untrustedWorld: 1 },

},

{

name: "Local SID (S-1-2-0) is world, not group",

entries: [

aclEntry({

principal: "*S-1-2-0",

rights: ["R"],

rawRights: "(R)",

canRead: true,

canWrite: false,

}),

],

expected: { untrustedWorld: 1 },

},

{

name: "Network SID (S-1-5-2) is world, not group",

entries: [

aclEntry({

principal: "*S-1-5-2",

rights: ["R"],

rawRights: "(R)",

canRead: true,

canWrite: false,

}),

],

expected: { untrustedWorld: 1 },

},

] as const)("$name", ({ entries, env, expected }) => {

expectSummaryCounts(entries, expected, env);

});

const objectUrl = "blob:managed-image";

vi.stubGlobal(

"URL",

Object.assign(URL, {

createObjectURL: vi.fn(() => objectUrl),

revokeObjectURL: vi.fn(),

}),

class extends URL {

static override createObjectURL = vi.fn(() => objectUrl);

static override revokeObjectURL = vi.fn();

},

);

const fetchMock = vi.fn(async (_url: string, init?: RequestInit) => {

const headers = init?.headers as Headers;