CVE-2026-100546
Received Received - Intake

Race Condition in OpenClaw Discord Realtime Voice Transcript

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
OpenClaw (npm package `openclaw`) versions >= 2026.7.2 and < 2026.9.2 contain a race condition in the Discord realtime voice transcript path. Concurrent control-classified voice transcripts could consume speaker context belonging to another participant after an asynchronous control check, causing a transcript to inherit another speaker's owner status. In Discord agent-proxy voice sessions using the affected realtime control path, an utterance from a non-owner participant could reach the downstream agent boundary marked as owner, so owner-sensitive behavior is applied to the wrong speaker. Exploitation depends on concurrent transcript timing and on the tools and commands available to the affected agent. The issue is fixed in 2026.9.2; as a workaround, disable Discord realtime voice for agents that distinguish owner and non-owner senders.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100546
EUVD
EUVD-2026-87504

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-362 The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a race condition in the OpenClaw npm package affecting versions between 2026.7.2 and 2026.9.2. It occurs in Discord realtime voice transcript handling where concurrent transcripts can improperly inherit speaker context. This causes non-owner participants to gain owner status, leading to owner-sensitive behavior being applied to unauthorized users in Discord agent-proxy voice sessions.

Detection Guidance

Detection requires monitoring Discord realtime voice transcript sessions for concurrent transcripts that improperly inherit speaker context. Check OpenClaw package versions between 2026.7.2 and 2026.9.1. Use npm list openclaw to verify installed version. Monitor agent-proxy voice sessions for non-owner utterances marked as owner.

Impact Analysis

The impact depends on how Discord agent-proxy voice sessions are used. If agents differentiate between owner and non-owner senders, unauthorized users could gain owner privileges. This might allow non-owners to execute owner-restricted commands or access sensitive data. Exploitation requires precise timing of concurrent transcripts and depends on the agent's available tools.

Compliance Impact

The vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized users to gain owner status in Discord agent-proxy voice sessions. This may lead to owner-sensitive behaviors being applied to wrong speakers, which could violate data access controls and confidentiality requirements under these regulations.

Mitigation Strategies

Immediately upgrade OpenClaw to version 2026.9.2 or later. As a temporary workaround, disable Discord realtime voice for agents that distinguish owner and non-owner senders. Monitor voice sessions for improper owner inheritance until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100546. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart