CVE-2026-41382
CVE-2026-41382 · OpenClaw < 2026.3.31 - Discord Voice Ingress Authorization Bypass via Channel and Role Validation Gaps
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenClaw before 2026.3.31 contains an authorization bypass vulnerability in Discord voice ingress that allows attackers to bypass channel and member allowlist restrictions. Attackers can exploit stale-role validation gaps and improper channel name validation to gain unauthorized access to restricted voice channels.
CVSS 2.3 · Low · EPSS 0.2% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
Original sources
- https://github.com/openclaw/openclaw/security/advisories/GHSA-x2m8-53h4-6hch
- https://github.com/openclaw/openclaw/commit/dba96e7507e0900f120e5e28e57755d69bf78759
- https://www.vulncheck.com/advisories/openclaw-discord-voice-ingress-authorization-bypass-via-channel-and-role-validation-gaps
- https://nvd.nist.gov/vuln/detail/CVE-2026-41382