Description
OpenClaw versions prior to 2026.3.2 fail to pass the senderIsOwner flag when processing Discord voice transcripts in agentCommand, causing the flag to default to true. Non-owner voice participants can exploit this omission to access owner-only tools including gateway and cron functionality in mixed-trust channels.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenClaw | OpenClaw | < 2026.3.2 | 2026.3.2 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | openclaw | < 2026.3.2 | 2026.3.2 | GHSA-wpg9-4g4v-f9rc |
Advisories 1
- WID-SEC-2026-0573 OpenClaw: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 23, 2026