Beveiligingsadvies

CVE-2026-27484

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-21 09:21:16

Laatst bijgewerkt 2026-02-24 18:14:56

Toegewezen door GitHub_M

CVSS-score 2.3

Status PUBLISHED

Beschrijving

OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, the Discord moderation action handling (timeout, kick, ban) uses sender identity from request parameters in tool-driven flows, instead of trusted runtime sender context. In setups where Discord moderation actions are enabled and the bot has the necessary guild permissions, a non-admin user can request moderation actions by spoofing sender identity fields. This issue has been fixed in version 2026.2.18.

← Alle CVE's bekijken Bekijk op cve.org ↗