Authorization Bypass in OpenClaw Discord Moderation Actions by OpenClaw

CVE-2026-62206

What is CVE-2026-62206?

OpenClaw versions prior to 2026.6.9 contain a vulnerability that allows lower-trust users to perform moderation actions on Discord without proper authorization checks. This flaw arises when the system does not enforce strict policy assessments for specific actions, thereby enabling unauthorized moderation activities. The extent of this issue relies heavily on the configuration of the operator and the ability of lower-trust inputs to interact with the compromised moderation paths.

References