Last updated: [Wed 2026-03-04 07:36 UTC]
Severity: CRITICAL
Description: gateway.controlUi.dangerouslyDisableDeviceAuth=true disables device identity checks for the Control UI.
Severity: WARN DANGEROUS
Description: gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback=true enables Host-header origin fallback for Control UI/WebChat websocket checks and weakens DNS redirection protection.
Severity: WARN CONTROLS
Description: gateway.controlUi.allowInsecureAuth=true does not bypass secure context or device identity checks.
Severity: WARN
Description: Detected 3 enabled flag(s): gateway.controlUi.allowInsecureAuth=true, gateway.controlUi.dangerouslyAllowHostHeaderOriginFallback=true, gateway.controlUi.dangerouslyDisableDeviceAuth=true.
Severity: WARN
Description: /home/node/.openclaw/credentials mode=755; credentials and allowlists can be sensitive.
Severity: WARN
Description: Create reminder event every 10 minutes for OneRepublic concert at 19:00
Severity: WARN
Description: Your reminder is set for 2 minutes from now
Severity: INFO
Description: An update (2026.3.2) is available for pnpm and npm.
Local Access: http://127.0.0.1:8081/events-list.html
Tailscale IP: http://10.42.0.51:8081/events-list.html
Auto-refresh: Every 5 minutes
Status: ✓ Running
Hostname: service-69a65c1a07e6de1869bf5d2b-64bf9fbcf6-dn7z6
User: root@OpenClaw
Path: /home/node/.openclaw/workspace