Executive brief
OpenClaw is a platform that allows users to manage server operations and approvals through Discord commands. The vulnerability allows any Discord user with general command permissions to approve pending host execution requests, even if they are not on the configured list of authorized approvers. This bypasses critical operational controls and allows unauthorized users to execute server commands that should require specific authorization.
Technical details
The vulnerability is an authorization bypass (CWE-863) in the Discord approval workflow. The `/approve` text command in the Discord integration failed to enforce the `channels.discord.execApprovals.approvers` allowlist when resolving pending exec approvals. A Discord user with general command permissions but not in the approver list could bypass this check and approve pending host executions. The vulnerability affects versions up to 2026.3.24 and is resolved in version 2026.3.28 via commit 355abe5eba, which enforces proper approver checks for text-based approval commands.
Affected products
- OpenClaw OpenClaw <= 2026.3.24
Timeline
- 2026-03-31: disclosed
- 2026-03-31: advisory
- 2026-03-28: patched: Version 2026.3.28 or later contains the fix