PT-2026-99219 · Unknown · Openclaw Discord

Qc9C

·

CVE-2026-100583

·

Published

2026-09-26

·

Updated

2026-09-28

CVSS v4.0

5.3

Medium

VectorAV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions OpenClaw Discord versions prior to 2026.7.1
Description An authorization bypass exists in guild metadata read actions. This flaw allows lower-trust senders to bypass the configured Discord read-target policy, enabling the retrieval of guild metadata from servers or channels that are excluded by channel allowlists.
Recommendations Update OpenClaw Discord to version 2026.7.1 or later.

Exploit

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-100583
GHSA-35WJ-HM2R-GHGW

Affected Products

Openclaw Discord