Lucene search
+L

6 matches found

EUVD
EUVD
•added 2026/03/19 10:07 p.m.•21 views

EUVD-2026-13318

OpenClaw versions prior to 2026.3.2 fail to pass the senderIsOwner flag when processing Discord voice transcripts in agentCommand, causing the flag to default to true. Non-owner voice participants can exploit this omission to access owner-only tools including gateway and cron functionality in...

5.9CVSS5.8AI score0.00144EPSS
SaveExploits0References2
Rows per page
Query Builder