GHSA-wh94-p5m6-mr7j: OpenClaw Discord moderation authorization used untrusted sender identity in tool-driven flows
- Identifiers
- CVE-2026-27484GHSA-wh94-p5m6-mr7j
- Published
- Record updated
- Affected
- openclaw < 2026.2.18
- Fixed in
- 2026.2.18
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
OpenClaw's Discord moderation handling for timeout, kick and ban actions took the sender identity from request parameters in tool-driven flows, rather than from trusted runtime sender context. In setups with Discord moderation enabled and the bot holding the necessary guild permissions, a non-admin user could request moderation actions by spoofing sender identity fields. The latest published affected version is 2026.2.17, with the affected range given as <=2026.2.17.
Mitigation
Moderation authorization now uses trusted sender context (`requesterSenderId`) instead of untrusted action params, and permission checks for required guild capabilities were added per action. The fix is planned for release 2026.2.18, with fix commit 775816035ecc6bb243843f8000c9a58ff609e32d.
Related items
- MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
- MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
- HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
- InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
- MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online