CVE-2026-41348

OpenClaw < 2026.3.31 - Group DM Channel Allowlist Bypass via Discord Slash Commands

Published Apr 23, 2026 CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed

Description

OpenClaw before 2026.3.31 contains an authorization bypass vulnerability in Discord slash command and autocomplete paths that fail to enforce group DM channel allowlist restrictions. Authorized Discord users can bypass channel restrictions by invoking slash commands, allowing access to restricted group DM channels.

Analysis

Technical impact

OpenClaw prior to version 2026.3.31 has an authorization bypass flaw in its Discord slash command and autocomplete paths. The flaw prevents the bot from enforcing the group DM channel allowlist, allowing any Discord user who can invoke a slash command to gain access to restricted group DM channels. This issue is limited to access control (CWE-863) and does not provide code execution or data exfiltration capabilities, but it permits unauthorized participation in protected channels.

Affected Systems

The vulnerability affects the OpenClaw application, specifically versions earlier than 2026.3.31. No additional vendors or products are listed; the affected software is the OpenClaw bot running on Node.js environments as indicated by the CPE.

Risk and Exploitability

Although the CVSS score is low at 2.3 and the EPSS score is under 1%, the exploitation requires only a Discord user who can trigger the bot's slash commands, which may be readily available to many actors. The risk is moderate due to potential privacy violations in group DM channels. The vulnerability is not currently listed in the CISA KEV catalog, suggesting it is not widely exploited yet, but systems using OpenClaw must be aware that unauthorized channel access is possible until the patch is applied.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

OpenClaw

unaffected

Version	Status	Constraints
`0`	affected	< 2026.3.31
`2026.3.31`	unaffected	—

Configuration 1 [-]

cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*

No data.

Vendor Product Versions

Openclaw

Version	Status	Scheme	Platform
`[0,2026.3.31)`	affected	generic	—
`2026.3.31`	unaffected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade OpenClaw to version 2026.3.31 or later, which fixes the allowlist enforcement bug.
Verify that the group DM channel allowlist is correctly configured and that restricted channels cannot be accessed via slash commands.
Restrict the usage of slash commands to only authorized users or channels to reduce the attack surface until the patch is fully applied.

Generated by OpenCVE AI on April 28, 2026 at 14:38 UTC.

Tracking

Advisories

Source	ID	Title
Github GHSA	GHSA-rvvf-6vh3-9j43	OpenClaw: Discord Slash Commands Bypass Group DM Channel Allowlist

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.177% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/openclaw/openclaw/commit/8fdb19676ab44cf85d47ee13c578195f2e527591
https://github.com/openclaw/openclaw/security/advisories/GHSA-rvvf-6vh3-9j43
https://www.vulncheck.com/advisories/openclaw-group-dm-channel-allowlist-bypass-via-discord-slash-commands

History

Nov 10, 2026 9:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Apr 23, 2026 10:15 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		OpenClaw before 2026.3.31 contains an authorization bypass vulnerability in Discord slash command and autocomplete paths that fail to enforce group DM channel allowlist restrictions. Authorized Discord users can bypass channel restrictions by invoking slash commands, allowing access to restricted group DM channels.
Title		OpenClaw < 2026.3.31 - Group DM Channel Allowlist Bypass via Discord Slash Commands
First Time appeared		Openclaw Openclaw openclaw
Weaknesses		CWE-863
CPEs		cpe:2.3:a:openclaw:openclaw::::::node.js::*
Vendors & Products		Openclaw Openclaw openclaw
References		https://github.com/openclaw/openclaw/commit/8fdb19676ab44cf85d47ee13c578195f2e527591 https://github.com/openclaw/openclaw/security/advisories/GHSA-rvvf-6vh3-9j43 https://www.vulncheck.com/advisories/openclaw-group-dm-channel-allowlist-bypass-via-discord-slash-commands
Metrics		cvssV3_1 `{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N'}` cvssV4_0 `{'score': 2.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N'}`