Privilege Escalation Vulnerability in OpenClaw: Discord allowFrom Feature Misconfiguration
Summary
GHSA-p44v-rx83-vjp4: Duplicate Advisory: Discord allowFrom could bind to mutable display names. Affects openclaw versions < 2026.5.6. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source package designed for managing interactions with Discord, enabling users to create bots and automate tasks within the Discord ecosystem. It leverages Discord's API to facilitate communication and user management. However, a critical vulnerability has been identified in versions prior to 2026.5.7, which allows attackers to exploit mutable display names for unauthorized access.
Vulnerability Detail
The vulnerability arises from the allowFrom feature in OpenClaw, which improperly validates Discord account identities. Instead of relying on immutable user IDs, it uses mutable display names, which can be easily changed by users. This flaw allows attackers to modify their display names to match those of legitimate users, thereby gaining unauthorized access to agent functionalities intended for other Discord identities. The potential ramifications include unauthorized actions being performed under the guise of another user, leading to privacy breaches and security risks.
How To Fix
No fixed version is published for this vulnerability.
To rectify this vulnerability, update OpenClaw to version 2026.5.7 or later. You can do this by running the following command in your terminal: npm install openclaw@latest. This will ensure that you are using a version of the package that has addressed the vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, consider disabling the allowFrom feature until you can update to the patched version. This can be done by modifying your configuration settings to restrict access based on immutable identifiers.
Conclusion
In summary, a privilege escalation vulnerability exists in OpenClaw due to improper validation of Discord account identities. Users are urged to update to the latest version to mitigate risks associated with unauthorized access. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for openclaw →
FAQ
The vulnerability allows attackers to gain unauthorized access by exploiting mutable display names instead of using secure, immutable user IDs.
You can check if your application is affected by using Vulert, which monitors vulnerabilities in your package-lock.json file. Visit Vulert Scanner to use the Vulert playground without signup.
The consequences include unauthorized access to sensitive functionalities, which can lead to privacy violations and misuse of user accounts.
Yes, the vulnerability has been patched in version 2026.5.7 of OpenClaw. It is recommended to update to this version or later.
The CVSS score of this vulnerability is 8.1, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.