CVE-2026-41381

OpenClaw < 2026.3.31 - Access Control Bypass in Discord Voice Manager via Channel Allowlist

Published Apr 28, 2026 CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed

Description

OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allowlist restrictions. Attackers can send Discord voice ingress requests before channel allowlist authorization is performed, gaining unauthorized access to restricted voice channels.

Analysis

Technical impact

This vulnerability allows an attacker to send Discord voice ingress requests before the channel allowlist verification occurs, enabling unauthorized entry into voice channels that should be protected. The flaw bypasses the intended access controls, potentially letting an unauthorized user eavesdrop on or inject unauthorized voice data.

Affected Systems

OpenClaw versions prior to 2026.3.31 are affected. The defect resides in the Discord voice manager component of the OpenClaw project and applies to all users running an unpatched copy.

Risk and Exploitability

The CVSS score of 2.3 indicates a low severity impact. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting no widespread exploitation has been reported. An attacker with network access to the Discord voice manager endpoint could exploit the flaw by sending crafted voice requests before the allowlist check completes, thereby bypassing channel‑level restrictions without gaining further privileges.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

OpenClaw

unaffected

Version	Status	Constraints
`0`	affected	< 2026.3.31
`2026.3.31`	unaffected	—

Configuration 1 [-]

cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*

No data.

Vendor Product Versions

Openclaw

Version	Status	Scheme	Platform
`[0,2026.3.31)`	affected	semver	—
`2026.3.31`	unaffected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade OpenClaw to version 2026.3.31 or later to apply the vendor‑issued fix.
Reconfigure the application so that channel allowlist checks are performed before processing any voice ingress requests to ensure proper authorization.
Restrict network exposure of the Discord voice manager endpoint, allowing access only from trusted hosts or behind an API gateway to limit attack surface.

Generated by OpenCVE AI on April 29, 2026 at 02:38 UTC.

Tracking

Advisories

Source	ID	Title
Github GHSA	GHSA-cqgw-44wg-44rf	OpenClaw: Discord voice manager bypasses channel-level member access allowlist

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.222% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/openclaw/openclaw/commit/dba96e7507e0900f120e5e28e57755d69bf78759
https://github.com/openclaw/openclaw/security/advisories/GHSA-cqgw-44wg-44rf
https://www.vulncheck.com/advisories/openclaw-access-control-bypass-in-discord-voice-manager-via-channel-allowlist

History

Apr 29, 2026 3:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Apr 28, 2026 7:15 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allowlist restrictions. Attackers can send Discord voice ingress requests before channel allowlist authorization is performed, gaining unauthorized access to restricted voice channels.
Title		OpenClaw < 2026.3.31 - Access Control Bypass in Discord Voice Manager via Channel Allowlist
First Time appeared		Openclaw Openclaw openclaw
Weaknesses		CWE-863
CPEs		cpe:2.3:a:openclaw:openclaw::::::node.js::*
Vendors & Products		Openclaw Openclaw openclaw
References		https://github.com/openclaw/openclaw/commit/dba96e7507e0900f120e5e28e57755d69bf78759 https://github.com/openclaw/openclaw/security/advisories/GHSA-cqgw-44wg-44rf https://www.vulncheck.com/advisories/openclaw-access-control-bypass-in-discord-voice-manager-via-channel-allowlist
Metrics		cvssV3_1 `{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N'}` cvssV4_0 `{'score': 2.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N'}`