v5.4.0

Summary

The v5.4.0 release of the framework adds four new techniques, including Publish Poisoned AI Agent Tool and User Execution: Poisoned AI Agent Tool, along with Escape to Host and Exploitation for Credential Access. It also updates the Modify AI Agent Configuration technique and adds four case studies covering exposed ClawdBot control interfaces, a poisoned ClawdBot skill supply chain compromise, a 1-click remote code execution in OpenClaw, and command and control via prompt injection in OpenClaw.

Topics

• AI agents

Related items

• MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
• InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
• InfoHow to Turn AI Red Team Findings Into Runtime ControlsSimilar attack · Straiker Blog
• HighCVE-2026-118627: MLflow SHAP load_explainer untrusted deserialization enables code executionSimilar attack · NVD/CVE Database
• HighCVE-2026-118623: MLflow PickleEvaluationArtifact remote code execution via untrusted pickleSimilar attack · NVD/CVE Database