Executive brief
OpenClaw is a library used to integrate Discord voice channels with AI processing pipelines. The software failed to properly validate whether users joining voice channels were authorized to do so, allowing unauthorized speakers to send voice data for transcription. An attacker could exploit this to bypass Discord channel and member access restrictions, potentially exposing sensitive conversations to unauthorized voice processing.
Technical details
The vulnerability is a missing authorization check (CWE-862) in the Discord voice ingress handler. The vulnerable code accepted voice data from any user on the network without validating against the configured guild channel allowlist, member allowlist, and role-based access controls that should have gated access. The attack requires network access to the voice ingress endpoint and prior knowledge of a target voice channel, but no authentication credentials are required. An attacker can send crafted voice frames that bypass channel and member validation, allowing speech to be processed as if from an authorized user. The fix (v2026.3.31) gates voice ingress by enforcing the same allowlist checks applied elsewhere in the codebase.
Affected products
- OpenClaw openclaw <=2026.3.28
Timeline
- 2026-04-03: disclosed
- 2026-03-31: patched: Fix released in v2026.3.31