Which versions of OpenClaw are affected by CVE-2026-41303?

OpenClaw versions prior to 2026.3.28 contain an authorization bypass that allows low-privilege Discord users to approve host command execution requests they are not authorized to approve, enabling…. A patch is available.

How to fix or mitigate CVE-2026-41303?

24 hours: Disable or restrict Discord bot execution approval commands in OpenClaw environments; audit recent approval request logs for unauthorized approvals. 7 days: Contact OpenClaw vendor for patch availability and estimated release timeline; implement network segmentation to limit Discord bot access to critical host execution endpoints. 30 days: Apply vendor-released patch to OpenClaw 2026.3.28 or later once available; conduct forensic review of host execution logs for unauthorized commands executed between vulnerability discovery and remediation.

OpenClaw CVE-2026-41303

Q: What is the CVSS score of CVE-2026-41303?

CVE-2026-41303 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

HIGH

Incorrect Authorization (CWE-863)

2026-04-21 disclosure@vulncheck.com

GHSA-98hh-7ghg-x6rq

Authentication Bypass Openclaw

8.7

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 21, 2026 - 16:22 vuln.today

cvss_changed

Patch released

Apr 21, 2026 - 02:30 nvd

Patch available

Analysis Generated

Apr 21, 2026 - 00:39 vuln.today

Analysis Generated

Apr 21, 2026 - 00:22 vuln.today

CVE Published

Apr 21, 2026 - 00:16 nvd

HIGH 8.7

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.28.

DescriptionCVE.org

OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to resolve pending exec approvals. Attackers can send Discord text commands to bypass the channels.discord.execApprovals.approvers allowlist and approve pending host execution requests.

AnalysisAI

Authorization bypass in OpenClaw before 2026.3.28 allows authenticated Discord users to approve pending host execution requests without proper privileges. Attackers with low-privileged Discord accounts can bypass the execApprovals.approvers allowlist by sending crafted Discord text commands, gaining unauthorized approval authority for exec requests. EPSS score is relatively low (0.06%, 18th percentile), and no active exploitation is confirmed, but the vulnerability enables complete compromise of the execution approval workflow with low attack complexity.

Technical ContextAI

This vulnerability affects OpenClaw's Discord-integrated execution approval system, which uses text-based commands to gate host execution requests. The flaw stems from CWE-863 (Incorrect Authorization), where the application fails to properly validate user permissions against the channels.discord.execApprovals.approvers allowlist before processing approval commands. The Discord integration layer inadequately enforces access control checks on text command handlers, allowing any authenticated Discord user to invoke approval functions regardless of their membership in the designated approver group. This represents a classic broken access control issue in a chat-ops workflow system.

RemediationAI

Upgrade to OpenClaw version 2026.3.28 or later, which contains the authorization fix per the vendor security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-98hh-7ghg-x6rq. If immediate patching is not feasible, disable Discord text-based approval commands entirely and implement alternative approval mechanisms (web UI, API with proper authentication) until upgrade completion. Compensating control: audit Discord bot permissions to restrict command execution to specific channels with monitored access logs, though this does not eliminate the bypass vulnerability. Review existing approved execution requests in the audit trail for unauthorized approvals submitted between initial deployment and patch application. Temporary workaround: remove Discord bot integration and revert to manual out-of-band approval processes, accepting the operational overhead trade-off for security assurance until patching.