Listen to this Post
The vulnerability arises from a logic gap in OpenClaw’s Discord extension. When a user interacts with a Discord component (e.g., a button or modal), the `agent-components.ts` handler processes the interaction without re‑applying the same guild‑ and channel‑level policy gates that are enforced for standard inbound messages.
Under normal operation, these policies restrict which channels or servers a bot can act upon based on configuration. However, component interactions—which carry the same originating guild/channel context—bypass this re‑evaluation.
As a result, an attacker who can send a component interaction (e.g., by clicking a button in a channel that would otherwise be blocked) can trigger privileged actions, such as executing administrative commands or accessing restricted resources, from contexts that should have been denied.
The flaw exists because the interaction ingress flow failed to invoke the same `applyPolicyGates` logic used for message events.
The fix, introduced in commit 511093d4b3, ensures that every component interaction goes through the policy enforcement chain, mirroring the checks applied to messages.
Platform: OpenClaw
Version: 2026.2.14‑2026.3.24
Vulnerability: Discord policy bypass
Severity: Moderate
Date: 2026‑03‑29
Prediction: 2026‑03‑28
What Undercode Say:
Check installed version
openclaw --version
Simulate a component interaction from a disallowed channel
curl -X POST https://discord.com/api/v9/interactions \
-H "Authorization: Bot <token>" \
-d '{"type":3,"guild_id":"<blocked_guild>","channel_id":"<blocked_channel>","data":{"component_type":2,"custom_id":"admin_button"}}'
Exploit:
An attacker in a guild/channel excluded by policy can still interact with any persistent component (e.g., a button from a previously sent message) to invoke privileged bot actions.
Protection from this CVE:
Update to OpenClaw version `2026.3.28` or later. If immediate update is not possible, temporarily disable Discord component handlers via configuration or restrict interaction permissions at the Discord application level.
Impact:
Unauthorized users can execute privileged operations from policy‑restricted channels, leading to potential privilege escalation, data exposure, or unintended command execution within the Discord environment.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
