CVE-2026-100546

OpenClaw (npm package `openclaw`) versions >= 2026.7.2 and < 2026.9.2 contain a race condition in the Discord realtime voice transcript path. Concurrent control-classified voice transcripts could consume speaker context belonging to another participant after an asynchronous control check, causing a transcript to inherit another speaker's owner status. In Discord agent-proxy voice sessions using the affected realtime control path, an utterance from a non-owner participant could reach the downstream agent boundary marked as owner, so owner-sensitive behavior is applied to the wrong speaker. Exploitation depends on concurrent transcript timing and on the tools and commands available to the affected agent. The issue is fixed in 2026.9.2; as a workaround, disable Discord realtime voice for agents that distinguish owner and non-owner senders.

• CWE-362

• https://github.com/openclaw/openclaw/security/advisories/GHSA-5x6q-wg56-rxg8
• https://www.vulncheck.com/advisories/openclaw-2026.7.2-before-2026.9.2-authentication-bypass-via-voice-transcript

Published

Sep 26, 2026

Last Modified

Sep 26, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-100540OpenClaw Feishu before 2026.8.1 fails to validate whether a …6.8
• CVE-2026-100541OpenClaw's Matrix integration (npm package @openclaw/matrix)…7.5
• CVE-2026-100542OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and …3.1
• CVE-2026-100543OpenClaw (npm package openclaw) before 2026.8.1 could includ…7.5
• CVE-2026-100544openclaw's @openclaw/voice-call package before 2026.8.1 laun…8.8
• CVE-2026-100545OpenClaw (npm package `openclaw`) before 2026.8.1 incorrectl…5.3
• CVE-2026-100547OpenClaw is a coding agent distributed as the npm package `o…5.5
• CVE-2026-100548OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and …5.3
• CVE-2026-100549OpenClaw versions before 2026.8.1 contain a path traversal v…5.4
• CVE-2026-10055In Eclipse Theia since version 1.26.0, the backend /services…8.5
• CVE-2026-100550OpenClaw (npm package 'openclaw') before 2026.8.1 contains a…5.4
• CVE-2026-100551OpenClaw for iOS versions >= 2026.7.1 and < 2026.8.11 do not…8.3