Executive brief
OpenClaw is a Discord bot framework that handles component interactions and message routing. A flaw in the Discord extension causes group direct messages (group DMs) to be incorrectly classified as individual direct messages, leading to potential misapplication of access policies and session management. This could allow unauthorized users to bypass intended message routing restrictions.
Technical details
The vulnerability exists in the component-interaction routing and authentication logic within extensions/discord/src/monitor/agent-components-helpers.ts. The flaw causes group DMs to be misclassified as direct messages, which bypasses proper policy enforcement and session handling for group conversations. The vulnerability affects all versions up to and including 2026.3.28, and requires the attacker to be an authenticated user with access to component interactions (PR:L). The impact is limited to policy and session misclassification in group DM contexts. The fix is available in version 2026.3.31 and later.
Affected products
- OpenClaw OpenClaw <=2026.3.28
Timeline
- 2026-04-03: disclosed: Advisory published
- 2026-03-31: patched: Fix released in version 2026.3.31