OpenClaw prior to version 2026.3.31 has an authorization bypass flaw in its Discord slash command and autocomplete paths. The flaw prevents the bot from enforcing the group DM channel allowlist, allowing any Discord user who can invoke a slash command to gain access to restricted group DM channels. This issue is limited to access control (CWE-863) and does not provide code execution or data exfiltration capabilities, but it permits unauthorized participation in protected channels.

The vulnerability affects the OpenClaw application, specifically versions earlier than 2026.3.31. No additional vendors or products are listed; the affected software is the OpenClaw bot running on Node.js environments as indicated by the CPE.

Although the CVSS score is low at 2.3 and the EPSS score is under 1%, the exploitation requires only a Discord user who can trigger the bot's slash commands, which may be readily available to many actors. The risk is moderate due to potential privacy violations in group DM channels. The vulnerability is not currently listed in the CISA KEV catalog, suggesting it is not widely exploited yet, but systems using OpenClaw must be aware that unauthorized channel access is possible until the patch is applied.