https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T04:44:17.372916+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-32035 CVE-2026-32035 — OpenClaw < 2026.3.2 - Missing Owner Flag Validation in Discord Voice Transcript Handler 2026-09-30T04:44:17.375058+00:00

Affected: OpenClaw

OpenClaw versions prior to 2026.3.2 fail to pass the senderIsOwner flag when processing Discord voice transcripts in agentCommand, causing the flag to default to true. Non-owner voice participants can exploit this omission to access owner-only tools including gateway and cron functionality in mixed-trust channels.

 https://vulnerability.circl.lu/vuln/ghsa-wpg9-4g4v-f9rc GHSA-wpg9-4g4v-f9rc — OpenClaw: Discord voice transcript owner-flag omission could expose owner-only tools in mixed-trust channels 2026-09-30T04:44:17.375167+00:00

Affected: npm: openclaw

### Summary In `openclaw@2026.3.1`, the Discord voice transcript path called `agentCommand(...)` without `senderIsOwner`, and `agentCommand` defaults missing `senderIsOwner` to `true`.

This could allow a non-owner voice participant in the same channel to reach owner-only tool surfaces (`gateway`, `cron`) during voice transcript turns.

### Security model note OpenClaw’s documented trust model is a **personal assistant** model (one trusted operator), not an adversarial multi-user boundary.

- OpenClaw does **not** treat one shared gateway/chat surface as a hardened per-user auth boundary. - Mixed-trust deployments (mutually untrusted users sharing one gateway/channel) are outside recommended deployment boundaries.

This report is treated as a valid hardening/authorization bug because owner-only tool policy should still be applied consistently across chat-driven turns, including Discord voice transcript ingress.

### Details Relevant path: 1. Voice transcript run omitted `senderIsOwner` in Discord voice manager. 2. Missing `senderIsOwner` defaulted to `true` in `agentCommand`. 3. Owner-only tool policy is keyed on `senderIsOwner`. 4. `gateway` and `cron` are owner-only tools.

### Impact - Affects deployments where Discord voice is enabled and the bot is present in channels with non-owner participants. - No gateway-auth boundary bypass was required. - Practical risk depends strongly on whether the deployment is single-trust (recommended) or mixed-trust (not recommended).

###…