Skip to content
OpenAdvisories

Product · OpenClaw

discord

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.3

    OpenClaw Discord before 2026.7.1 Authorization Bypass

    OpenClaw Discord versions before 2026.7.1 contain an authorization bypass vulnerability in guild metadata read actions that allows lower-trust senders to retrieve information excluded by channel allowlists. Attackers can bypass the configured Discord read-tar…

  • Medium 5.3

    Vulnerability in discord

    OpenClaw's Discord integration (npm package @openclaw/discord) before version 2026.9.3 could lose the sender-scoped media policy in the emoji and sticker upload actions before loading a local file. A sender permitted to invoke those actions could cause OpenCl…