Executive brief
OpenClaw is a popular Discord bot library that manages which Discord channels are allowed for automated commands. The library's Discord slash commands and autocomplete handlers fail to validate the group direct message channel restrictions, allowing already-logged-in users with existing access to send commands to group chats they should not have permission to use. This bypasses intended channel restrictions but does not allow unauthorized users to gain new access.
Technical details
OpenClaw is a Discord bot library for handling automated interactions. The vulnerability is an authorization bypass (CWE-863) in the Discord slash commands and autocomplete processing paths. These paths fail to enforce the group direct message (group DM) channel allowlist that is properly validated in other command paths. An authenticated Discord user who already has authorization to use the bot can exploit this by invoking slash commands in group DM channels that should be restricted, bypassing channel-level access controls. The fix is available in version 2026.3.31 and later, and was implemented in commit 8fdb19676ab44cf85d47ee13c578195f2e527591.
Affected products
- OpenClaw openclaw <=2026.3.28
Timeline
- 2026-04-03: disclosed: Vulnerability published as GHSA-rvvf-6vh3-9j43
- 2026-03-30: patched: Fix committed and released in version 2026.3.31