CVE-2026-41382 - OpenClaw < 2026.3.31 - Discord Voice Ingress Authorization Bypass via Channel and Role Validation Gaps

Back Back to CVE browser

LOW

OpenClaw < 2026.3.31 - Discord Voice Ingress Authorization Bypass via Channel and Role Validation Gaps

Published Apr 28, 2026

2.3

LOW

CVSS 4.0

EPSS 0.31%

Description

OpenClaw before 2026.3.31 contains an authorization bypass vulnerability in Discord voice ingress that allows attackers to bypass channel and member allowlist restrictions. Attackers can exploit stale-role validation gaps and improper channel name validation to gain unauthorized access to restricted voice channels.

Affected products

Vendor OpenClaw Product OpenClaw Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <2026.3.31
- Version
  2026.3.31
  Status
  unaffected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

OpenClaw

unaffected

Version	Status	Constraints
0	affected	<2026.3.31
2026.3.31	unaffected	-

Ecosystem	Package	Introduced	Fixed
npm	openclaw	0	2026.3.31

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26091
Advisory
https://github.com/advisories/GHSA-x2m8-53h4-6hch
Advisory
https://github.com/openclaw/openclaw/commit/dba96e7507e0900f120e5e28e57755d69bf78759
patch
https://github.com/openclaw/openclaw/releases/tag/v2026.3.31
https://github.com/openclaw/openclaw/security/advisories/GHSA-x2m8-53h4-6hch
vendor-advisoryVendor Advisory
https://www.vulncheck.com/advisories/openclaw-discord-voice-ingress-authorization-bypass-via-channel-and-role-validation-gaps
third-party-advisoryThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26091		Advisory
https://github.com/advisories/GHSA-x2m8-53h4-6hch		Advisory
https://github.com/openclaw/openclaw/commit/dba96e7507e0900f120e5e28e57755d69bf78759		patch
https://github.com/openclaw/openclaw/releases/tag/v2026.3.31
https://github.com/openclaw/openclaw/security/advisories/GHSA-x2m8-53h4-6hch		vendor-advisoryVendor Advisory
https://www.vulncheck.com/advisories/openclaw-discord-voice-ingress-authorization-bypass-via-channel-and-role-validation-gaps		third-party-advisoryThird Party Advisory