Executive brief
OpenClaw is a JavaScript library that integrates Discord bot functionality with component interaction routing. A logic error causes group direct messages to be misclassified as single direct messages, potentially allowing attackers to bypass policy enforcement rules that are meant to apply only to group conversations. The impact is limited but could lead to unauthorized message handling or session management errors in affected applications.
Technical details
A logic error in OpenClaw's Discord component interaction routing (in extensions/discord/src/monitor/agent-components-helpers.ts) misclassifies group direct messages as single direct messages. The vulnerability is CWE-351 (Misclassification of an Important Resource). Exploitation requires network access and authenticated interaction with the Discord bot; an attacker can send crafted component interactions within group DMs to trigger incorrect policy enforcement or session handling. The vulnerability was patched in version 2026.3.31; all versions ≤2026.3.28 are affected. The real-world impact is narrow and limited to group DM policy and session misclassification scenarios.
Affected products
- OpenClaw OpenClaw <=2026.3.28
Timeline
- 2026-03-31: disclosed
- 2026-03-31: patched: Version 2026.3.31 released with fix
- 2026-04-24: advisory: GHSA-pr66-whqj-rq5p published (later withdrawn as duplicate)
- 2026-05-04: other: GHSA-pr66-whqj-rq5p withdrawn as duplicate of GHSA-6336-qqw9-v6x6