Beveiligingsadvies

CVE-2026-100583

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-26 02:19:08

Laatst bijgewerkt 2026-10-08 15:21:51

Toegewezen door VulnCheck

CVSS-score 5.3

Status PUBLISHED

Beschrijving

OpenClaw Discord versions before 2026.7.1 contain an authorization bypass vulnerability in guild metadata read actions that allows lower-trust senders to retrieve information excluded by channel allowlists. Attackers can bypass the configured Discord read-target policy to access guild metadata from servers or channels outside the operator's allowlist.

← Alle CVE's bekijken Bekijk op cve.org ↗