GHSA-9vvh-2768-c8vp

Source

https://github.com/advisories/GHSA-9vvh-2768-c8vp

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-9vvh-2768-c8vp/GHSA-9vvh-2768-c8vp.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-9vvh-2768-c8vp

Downstream

MINI-6f2p-x5rr-57c7

Published

2026-03-13T18:58:20Z

Modified

2026-03-14T09:13:30.132902Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVSS Calculator

Summary

OpenClaw: Discord guild reaction ingress could bypass users and roles allowlists

Details

Summary

In affected versions of openclaw, Discord reaction ingestion for guild channels did not enforce the same member users and roles allowlist checks used for normal inbound guild messages. A non-allowlisted guild member could still trigger reaction events that were accepted and queued as trusted system events for the target session.

Impact

This is an authorization bypass in the Discord allowlist path. Reaction text could be injected into downstream session context even when the reacting guild member was not permitted by the configured users or roles allowlist.

Affected Packages and Versions

Package: openclaw (npm)
Affected versions: < 2026.3.11
Fixed in: 2026.3.11

Technical Details

The reaction ingress authorization path enforced DM, group, guild, and channel policy checks, but it did not apply the member-level users and roles allowlist gate that normal guild-message preflight uses. Accepted reactions were then enqueued as trusted system events for the routed session.

Fix

OpenClaw now applies the same users and roles allowlist enforcement to guild reaction ingress that it already applies to normal inbound guild messages. The fix shipped in openclaw@2026.3.11.

Workarounds

Upgrade to 2026.3.11 or later.

Database specific

{
    "github_reviewed": true,
    "github_reviewed_at": "2026-03-13T18:58:20Z",
    "severity": "MODERATE",
    "nvd_published_at": null,
    "cwe_ids": [
        "CWE-284",
        "CWE-863"
    ]
}

References

Affected packages

npm / openclaw

Package

Name: openclaw; View open source insights on deps.dev
Purl: pkg:npm/openclaw

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2026.3.11

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-9vvh-2768-c8vp/GHSA-9vvh-2768-c8vp.json"