N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-hhff-fj5f-qg48

GHSA-hhff-fj5f-qg48: OpenClaw runs Discord audio preflight transcription before member authorization

Summary

Discord audio preflight transcription before member authorization

Current Maintainer Triage

Status: narrow
Normalized severity: medium
Assessment: v2026.3.28 still runs Discord audio preflight before member allowlist rejection, but this is the same pre-auth resource-consumption class and not the high-severity auth-bypass framing in the draft.

Affected Packages / Versions

Package: openclaw (npm)
Latest published npm version: 2026.3.31
Vulnerable version range: <=2026.3.28
Patched versions: >= 2026.3.31
First stable tag containing the fix: v2026.3.31

Fix Commit(s)

ee52f64226a03efadfdf1e3b759e13424a3d4e41 — 2026-03-30T14:38:22+01:00

OpenClaw thanks @AntAISecurityLab for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-hhff-fj5f-qg48

GHSA-hhff-fj5f-qg48:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.3.28	2026.3.31

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the preflightDiscordMessage function located in extensions/discord/src/monitor/message-handler.preflight.ts. The flaw was an incorrect order of operations where the application would perform resource-intensive audio transcription on incoming messages before verifying if the sender was authorized to interact in the channel. The transcription is handled by the resolveDiscordPreflightAudioMentionContext function.

An attacker could exploit this by sending messages with audio attachments to a guild channel where they are not on the allowlist. The server would then unnecessarily transcribe the audio, consuming CPU and memory resources, even though the message would be subsequently dropped due to the failed authorization check. This constitutes a resource exhaustion vulnerability (CWE-770).

The patch in commit ee52f64226a03efadfdf1e3b759e13424a3d4e41 corrects this by moving the member authorization check (resolveDiscordMemberAccessState) to execute before the call to the audio transcription function (resolveDiscordPreflightAudioMentionContext). This ensures that only messages from authorized users will trigger the expensive transcription process.

Vulnerable functions

preflightDiscordMessage

extensions/discord/src/monitor/message-handler.preflight.ts

This function contained the core logic flaw. It was responsible for processing incoming Discord messages and, prior to the patch, it called the resource-intensive audio transcription function `resolveDiscordPreflightAudioMentionContext` *before* verifying if the user was authorized. The patch reordered the logic to perform the authorization check first.

resolveDiscordPreflightAudioMentionContext

extensions/discord/src/monitor/message-handler.preflight.ts

This function performs the actual audio transcription. In the vulnerable state, it was called by `preflightDiscordMessage` for messages from unauthorized users, leading to excessive resource consumption. During exploitation, this function would be a key indicator of the vulnerable activity in a runtime profile or stack trace.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.