GitHub Advisoryadvisory · npm

GHSA-98hh-7ghg-x6rq OpenClaw: Discord text `/approve` bypasses `channels.discord.execApprovals.approvers` and allows non-approvers to resolve pending exec approvals

HIGH Published 2026-03-31 Modified 2026-04-24 Official page ↗
Aliases
CVE-2026-41303
Ecosystem
npm
Packages
openclaw
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-863
Reviewed
2026-03-31

Affected packages

• npm openclaw: < 2026.3.28 → fixed in 2026.3.28

Description

Summary Discord text approval commands resolved pending exec approvals without honoring the configured approver allowlist. Impact A Discord user who was allowed to send commands but was not in the approver list could still approve pending host execution. Affected Component `extensions/discord/src/exec-approvals.ts, src/auto-reply/reply/commands-approve.ts` Fixed Versions • Affected: `= 2026.3.28` • Latest stable `2026.3.28` contains the fix. Fix Fixed by commit `355abe5eba` (`Discord: enforce approver checks for text approvals`).

Related

Alias · CVE (1)

  • CVE-2026-41303 OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to… vulnerability

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References