Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to resolve pending exec approvals. Attackers can send Discord text commands to bypass the channels.discord.execApprovals.approvers allowlist and approve pending host execution requests.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-41303 OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to resolve pending exec approvals… https://www.cve.org/CVERecord?id=CVE-2026-41303
Post summary
The post announces CVE-2026-41303, describing an authorization bypass in OpenClaw’s Discord text approval commands that lets non‑approvers resolve pending exec approvals.
`OpenClaw` has a vulnerability (CVE-2026-41303) allowing `/approve` command bypass in `Discord` integrations, leading to unauthorized approvals. Review workflows. #OpenClaw #Discord #Infosec https://www.pulsepatch.io/posts/cve-2026-41303-openclaw-discord-approval-bypass
Post summary
A new CVE-2026-41303 vulnerability in OpenClaw permits bypass of the /approve command within Discord integrations, enabling unauthorized approvals.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |