Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-53818— OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback

Quick assessment

Affected

OpenClaw OpenClaw

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

OpenClaw是OpenClaw开源的一个智能人工助理。 OpenClaw 2026.4.24之前版本存在安全漏洞，该漏洞源于MCP回环功能中的授权绕过问题，允许非所有者调用者跳过仅限所有者的工具策略和工具调用前钩子。攻击者可以通过受影响的回环路径调用仅限所有者的行为，在功能启用且可访问时执行受限工具。

CVSS 6.6 · Medium EPSS 0.10% · P1 Updated Jun 27, 2026

Possible ATT&CK Techniques 1 AI

T1528 · Steal Application Access Token

Affected Version Matrix 2

Vendor	Product	Version Range	Status
OpenClaw	OpenClaw	`< 2026.4.24`	affected
		`2026.4.24`	unaffected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-53818

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback

Source: CVE Program / CVE List V5

Vulnerability Description

OpenClaw before 2026.4.24 contains an authorization bypass vulnerability in the MCP loopback feature that allows non-owner callers to skip owner-only tool policies and before-tool-call hooks. Attackers can invoke owner-only behavior through the affected loopback path to execute restricted tools when the feature is enabled and reachable.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

授权机制缺失

Source: CVE Program / CVE List V5

Vulnerability Title

OpenClaw 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
OpenClaw	OpenClaw	0 ~ 2026.4.24	-

II. Public POCs for CVE-2026-53818

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-53818

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-53818 (2)

🔗 OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback | Advisories | VulnCheck third-party-advisory
🔗 MCP loopback could skip owner-only tool policy for non-owner callers · Advisory · openclaw/openclaw · GitHub vendor-advisory patch

https://www.cve.org/CVERecord?id=CVE-2026-53818

Same Patch Batch · OpenClaw · 2026-06-11 · 14 CVEs total

CVE-2026-53806	8.8 HIGH	OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation
CVE-2026-53807	8.8 HIGH	OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.
CVE-2026-53810	8.8 HIGH	OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extensio
CVE-2026-53811	8.8 HIGH	OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Display Names in Matrix allowFrom
CVE-2026-53817	8.8 HIGH	OpenClaw < 2026.5.22 - Control UI Locality Spoofing in Device Pairing
CVE-2026-53819	8.8 HIGH	OpenClaw < 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Override
CVE-2026-53814	8.3 HIGH	OpenClaw < 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool Authority
CVE-2026-53813	7.8 HIGH	OpenClaw < 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolution
CVE-2026-53812	7.7 HIGH	OpenClaw < 2026.5.18 - Private-Network Navigation Bypass via Browser Act Interactions
CVE-2026-53816	7.2 HIGH	OpenClaw < 2026.5.18 - Exec Lifecycle Event Forgery via Paired Node
CVE-2026-53808	6.5 MEDIUM	OpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow
CVE-2026-53815	6.5 MEDIUM	OpenClaw < 2026.5.19 - Channel Allowlist Bypass in Message Read Actions
CVE-2026-53809	3.8 LOW	OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy

IV. Related Vulnerabilities

Same product: OpenClaw

Same vendor: OpenClaw

Same weakness: CWE-862