Lucene search
+L

2 matches found

NVD
NVD
added 2026/03/19 10:16 p.m.9 views

CVE-2026-32035

OpenClaw versions prior to 2026.3.2 fail to pass the senderIsOwner flag when processing Discord voice transcripts in agentCommand, causing the flag to default to true. Non-owner voice participants can exploit this omission to access owner-only tools including gateway and cron functionality in...

7.1CVSS0.00139EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/19 10:7 p.m.7 views

CVE-2026-32035

OpenClaw versions prior to 2026.3.2 fail to pass the senderIsOwner flag when processing Discord voice transcripts in agentCommand, causing the flag to default to true. Non-owner voice participants can exploit this omission to access owner-only tools including gateway and cron functionality in...

5.9CVSS5.8AI score0.00139EPSS
SaveExploits0References3
Rows per page
Query Builder