5 matches found
EUVD-2026-13318
OpenClaw versions prior to 2026.3.2 fail to pass the senderIsOwner flag when processing Discord voice transcripts in agentCommand, causing the flag to default to true. Non-owner voice participants can exploit this omission to access owner-only tools including gateway and cron functionality in...
5.9CVSS5.8AI score0.00139EPSS
SaveExploits0References2
20