# A Cron Tool That Answered to Anyone: OpenClaw Beta.6 Closes MCP Privilege Escalation and Fifteen More Security Gaps

- slug: a-cron-tool-that-answered-to-anyone-openclaw-beta6-closes-mcp-privilege-escalation-and-fifteen-m
- date: 2026-04-24
- category: Agentics

One line of code now stops non-owner callers from invoking the cron scheduler through OpenClaw's MCP bridge. Same beta: Teams token replay, Android cleartext bypass, QQBot auth gap, WhatsApp prompt injection -- all 15+ fixes in one build.

---