Lucene search
+L

5 matches found

EUVD
EUVD
added 2026/03/19 10:7 p.m.11 views

EUVD-2026-13318

OpenClaw versions prior to 2026.3.2 fail to pass the senderIsOwner flag when processing Discord voice transcripts in agentCommand, causing the flag to default to true. Non-owner voice participants can exploit this omission to access owner-only tools including gateway and cron functionality in...

5.9CVSS5.8AI score0.00139EPSS
SaveExploits0References2
Rows per page
Query Builder