Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/03 9:32 p.m.14 views

OpenClaw: Discord voice transcript owner-flag omission could expose owner-only tools in mixed-trust channels

Summary In [email protected], the Discord voice transcript path called agentCommand... without senderIsOwner, and agentCommand defaults missing senderIsOwner to true. This could allow a non-owner voice participant in the same channel to reach owner-only tool surfaces gateway, cron during voice...

7.1CVSS5.9AI score0.00139EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder