Security Advisory

CVE-2026-41303

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-20 23:08:15

Last updated 2026-04-21 13:35:55

Assigner VulnCheck

CVSS score 8.7

State PUBLISHED

Description

OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to resolve pending exec approvals. Attackers can send Discord text commands to bypass the channels.discord.execApprovals.approvers allowlist and approve pending host execution requests.

← Browse all CVEs View on cve.org ↗