Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/07/02 4:05 p.m.•36 views

OpenClaw: Hook-triggered CLI runs could receive owner MCP tool authority

Summary OpenClaw hook ingress can start automated agent runs using a configured hook token. In affected releases, a hook-triggered run could select a bundled CLI backend that received owner-scoped MCP loopback authority instead of a scope appropriate for hook ingress. This issue affects the...

8.7CVSS5.8AI score0.00393EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder