CVE-2026-53814

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.20

Description A privilege escalation issue exists where hook-triggered agent runs incorrectly receive owner-scoped MCP loopback authority instead of the appropriate hook scope. This allows attackers possessing a valid hook token to exploit the '/hooks/agent' endpoint, causing spawned CLI runtimes to access or invoke owner-only MCP tools. This can lead to the execution of privileged actions, such as persistent cron state modifications.

Recommendations Update to version 2026.5.20 or later. Restrict access to the '/hooks/agent' endpoint to minimize the risk of exploitation.