Executive brief
OpenClaw is a Discord bot framework that manages voice channels and enforces access controls to restrict who can join and communicate in those channels. The vulnerability allows unauthorized Discord users outside the configured allowlist to transmit speech in protected voice channels by bypassing the member access validation, potentially exposing conversations to unauthorized parties or allowing malicious users to inject commands or content into monitored channels.
Technical details
OpenClaw's Discord voice ingress handler failed to validate channel-level and member-level allowlists before accepting incoming speech from users, creating an authorization bypass vulnerability (CWE-863: Incorrect Authorization). The vulnerability affects the voice transcription pipeline, which accepted audio input and transcribed it without first confirming the speaker was in the configured access allowlist. An authenticated Discord user could join a voice channel and transmit speech even if not whitelisted, and the system would process and transcribe that speech. The fix, released in version 2026.3.31, adds explicit allowlist gating to the voice ingress handler, validating guild channel and member permissions before accepting audio.
Affected products
- OpenClaw OpenClaw <=2026.3.28
Timeline
- 2026-04-03: disclosed
- 2026-03-31: patched: Fix released in version 2026.3.31