Executive brief
OpenClaw, a tool used for managing Discord-based automation and gateways, contains a security flaw in how it identifies users. An attacker can change their Discord display name to match a name on an authorized list, potentially gaining unauthorized access to tools or data intended for another user. This could lead to unauthorized actions being performed through the Discord gateway.
Technical details
OpenClaw versions up to 2026.5.6 are vulnerable to an authentication bypass (CWE-290) because the 'allowFrom' policy feature can be configured to match against Discord display names or global names. Since these metadata fields are mutable and can be changed by any Discord user, an attacker with low privileges can change their display name to match a trusted entry in the allowlist. This allows the attacker to assume the identity of a trusted user and gain agent access. The vulnerability is remediated in version 2026.5.7 by ensuring policies use stable Discord user IDs instead of mutable names.
Affected products
- openclaw openclaw <= 2026.5.6
Timeline
- 2026-05-28: disclosed
- 2026-06-18: advisory: GitHub Advisory published