Executive brief
OpenClaw is a security gateway that controls agent access using allowlist policies. The Discord allowFrom feature incorrectly validates user identity by checking mutable display names instead of permanent user IDs. An attacker with a Discord account can change their display name to match a policy entry and gain unauthorized agent access intended for legitimate users.
Technical details
This is an authentication bypass vulnerability (CWE-290) in the Discord allowFrom feature of OpenClaw. The vulnerable component validates Discord account identity using the mutable display name or global name field instead of the immutable user ID. An authenticated attacker with write access to their Discord profile can change their display name to match an entry in a policy allowlist, bypassing the intended access control. The vulnerability requires the allowFrom feature to be enabled and reachable. OpenClaw patched this in version 2026.5.7 by switching validation to use stable Discord user IDs.
Affected products
- OpenClaw OpenClaw <= 2026.5.6
Timeline
- 2026-05-28: disclosed: Advisory GHSA-cw4q-gqg5-g38h published
- 2026.5.7: patched: Patched version released
- 2026-06-16: other: Duplicate advisory GHSA-p44v-rx83-vjp4 published
- 2026-06-18: other: Duplicate advisory GHSA-p44v-rx83-vjp4 withdrawn