Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/03/19 10:7 p.m.25 views

CVE-2026-32035 OpenClaw < 2026.3.2 - Missing Owner Flag Validation in Discord Voice Transcript Handler

OpenClaw versions prior to 2026.3.2 fail to pass the senderIsOwner flag when processing Discord voice transcripts in agentCommand, causing the flag to default to true. Non-owner voice participants can exploit this omission to access owner-only tools including gateway and cron functionality in...

5.9CVSS0.00139EPSS
SaveExploits0References2
Rows per page
Query Builder