Tank OS Released for OpenClaw

Sally O'Malley, a Red Hat principal engineer and OpenClaw maintainer, has released the open-source Tank OS.

Tank OS packages OpenClaw as a ready-to-boot system image for distribution. Each AI agent runs in an isolated container, isolated via rootless Podman without administrator privileges.

• The same image can be deployed on cloud servers, VMs, or physical hardware.
• Updates are handled by swapping the image and rebooting, reducing manual patching.
• O'Malley is the maintainer who has handled enterprise use cases and the Red Hat Linux ecosystem within the project.
• CVE-2026-25253 was an 8.8-rated vulnerability where simply visiting a malicious webpage could leak login credentials and control of the computer.
• Before the patch, over 17,500 exposed instances were affected, and a security audit found that 12–20% of ClawHub add-ons were classified as malicious.