vulnerability · openclaw + mcp

MCP loopback could expose owner-only tools to non-owner runs

MCP loopback could expose owner-only tools to non-owner runs. The official advisory identifies openclaw >= 2026.5.20, < 2026.6.6 as affected.

high severityconfirmed confidencepatchedNo known exploitation

Quick answer

What defenders need to know

What is it?: MCP loopback could expose owner-only tools to non-owner runs. The official advisory identifies openclaw >= 2026.5.20, < 2026.6.6 as affected.
Who is affected?: openclaw >= 2026.5.20, < 2026.6.6
What should defenders do?: Upgrade openclaw to 2026.6.6 or later.
Is a fix available?: Yes. Upgrade to 2026.6.6.

01 / Response

Upgrade openclaw to 2026.6.6 or later.
Until upgraded, restrict the affected feature to trusted operators or disable it when it is not needed.

02 / Technical assessment

OpenClaw's official security advisory assigns high severity with CVSS 8.3 and references CWE-269, CWE-862.

Official advisory: MCP loopback could expose owner-only tools to non-owner runs.
Affected range: >= 2026.5.20, < 2026.6.6. First patched version: 2026.6.6.

03 / Timeline