Threats tagged 'ghsa-6fvr-66p3-3qj4'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.4	EPSS 0.3%	CVE-2026-53814OpenClaw · Hook-triggered CLI runs could receive owner MCP tool authority High8.4EPSS 0.3%2026-08-13GCVE DatabaseCVE-2026-53814 OpenClaw CLI versions prior to 2026.5.20 contain a vulnerability where hook-triggered runs using a configured hook token could escalate privileges by selecting a CLI backend with owner-level MCP tool authority. This affects deployments with hooks enabled and accessible hook tokens, potentially allowing unauthorized access to owner-only MCP tools. The issue is fixed in version 2026.5.20. EPSS 0.3%Vulnerability CWE-200 #ghsa-6fvr-66p3-3qj4 #npm	GCVE Database	2026-08-13

Page 1 of 1