{"data":{"id":"7235d25f-1f89-4ea4-8f1d-c9a382e8a622","title":"v5.4.0","summary":"The v5.4.0 release of the framework adds four new techniques, including Publish Poisoned AI Agent Tool and User Execution: Poisoned AI Agent Tool, along with Escape to Host and Exploitation for Credential Access. It also updates the Modify AI Agent Configuration technique and adds four case studies covering exposed ClawdBot control interfaces, a poisoned ClawdBot skill supply chain compromise, a 1-click remote code execution in OpenClaw, and command and control via prompt injection in OpenClaw.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://github.com/mitre-atlas/atlas-data/releases/tag/v5.4.0","publishedAt":"2026-02-06T04:11:25.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["prompt_injection","supply_chain"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["OpenClaw","ClawdBot"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-02-06T04:11:25.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.8,"researchCategory":"industry","atlasIds":["AML.T0010","AML.T0051"]}}