MCPwner AI Pentesting Tool Finds Multiple 0-Day Vulnerabilities in OpenClaw
What MCPwner Is
MCPwner is an MCP (Model Context Protocol) server that enables AI agents to conduct automated penetration testing against security targets. The developer built it to orchestrate older AI models like GPT-4o and Claude 3.5 Sonnet, which when properly directed through MCPwner can find deep architectural flaws that standard scanning tools miss.
Recent OpenClaw Findings
When pointed at OpenClaw, MCPwner successfully identified multiple 0-day vulnerabilities that have now received official advisories. These weren't just minor bugs but critical security issues:
- Environment Variable Injection
- ACP permission auto-approval bypass
- File-existence oracle information disclosure
- safeBins stdin-only bypass
The tool found logic bypasses and injection points that traditional static analysis tools completely overlooked.
Technical Approach
MCPwner demonstrates that mid-tier and older AI models, when properly orchestrated through this MCP server, can outperform traditional static analysis for vulnerability discovery. The project has already identified multiple vulnerabilities and other CVEs beyond the OpenClaw findings.
Project Status and Contribution
The project is still in active development but already producing results. The developer is seeking contributors to help sharpen the scanning logic and expand the toolkit. Pull requests and feedback are welcome, particularly from those building in the offensive AI space who want to test the tool.
GitHub repository: https://github.com/Pigyon/MCPwner
📖 Read the full source: r/openclaw
👀 See Also
Google TIG Reports First AI-Generated Zero-Day Exploit in the Wild
Google Threat Intelligence Group has identified a threat actor using a zero-day exploit believed to be developed with AI, marking the first observed offensive use of AI for zero-day vulnerability exploitation.
FlyTrap Attack Uses Adversarial Umbrellas to Compromise Camera-Based Autonomous Drones
UC Irvine researchers developed FlyTrap, a physical attack framework that uses painted umbrellas to exploit vulnerabilities in camera-based autonomous target tracking systems. The attack reduces tracking distances to dangerous levels, enabling drone capture, sensor attacks, or physical collisions.
Skill Analyzer Now Available on ClawHub with One-Command Install
The OpenClaw Skill Analyzer security scanner is now available on ClawHub with a single command install. The tool scans skill folders for malicious patterns like prompt injection and credential theft, and includes Docker sandbox support for safe execution.
Unsecured Paperclip Instances Exposing Live Dashboards via Google Search
A Reddit user discovered a live Paperclip dashboard with full organizational data indexed by Google after searching for an error. The instance was publicly exposed without authentication, revealing org charts, agent conversations, task assignments, and business plans.