Beveiligingsadvies

CVE-2026-41303

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-20 23:08:15

Laatst bijgewerkt 2026-04-21 13:35:55

Toegewezen door VulnCheck

CVSS-score 8.8

Status PUBLISHED

Beschrijving

OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to resolve pending exec approvals. Attackers can send Discord text commands to bypass the channels.discord.execApprovals.approvers allowlist and approve pending host execution requests.

← Alle CVE's bekijken Bekijk op cve.org ↗