CVE-2026-41382: OpenClaw < 2026.3.31 - Discord Voice Ingress Authorization Bypass via Channel and Role Validation Gaps
OpenClaw before 2026.3.31 contains an authorization bypass vulnerability in Discord voice ingress that allows attackers to bypass channel and member allowlist restrictions. Attackers can exploit stale-role validation gaps and improper channel name validation to gain unauthorized access to restricted voice channels.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-41382?
CVE-2026-41382 has been classified as a high severity vulnerability due to its potential impact on Discord voice ingress security.
How do I fix CVE-2026-41382?
To fix CVE-2026-41382, upgrade OpenClaw to version 2026.3.31 or later to address the authorization bypass vulnerability.
What does CVE-2026-41382 exploit?
CVE-2026-41382 exploits gaps in channel and role validation, allowing unauthorized access to Discord voice channels.
Who is affected by CVE-2026-41382?
Users and administrators of OpenClaw versions prior to 2026.3.31 are affected by CVE-2026-41382.
What are the implications of CVE-2026-41382?
The implications of CVE-2026-41382 include unauthorized access to voice channels, potentially leading to privacy breaches and data leaks.