Openclaw cli: OpenClaw: Discord voice transcript owner-flag omission could expose owner-only tools in mixed-trust channels (CVE-2026-32035)

In OpenClaw CLI (npm package) versions <= 2026.3.1, the Discord voice transcript path calls agentCommand without explicitly passing the senderIsOwner flag. The agentCommand function defaults missing senderIsOwner to true, which causes owner-only tools such as gateway and cron to be accessible to non-owner voice participants sharing the same Discord voice channel. This is a violation of the intended authorization model. The issue is relevant only in mixed-trust deployments where untrusted users share a gateway/channel, which is not the recommended deployment model. The vulnerability is fixed in version 2026.3.2 by ensuring explicit senderIsOwner flags are passed and failing closed when owner status is unknown.

This vulnerability allows non-owner participants in a Discord voice channel to access owner-only tools during voice transcript turns, potentially leading to unauthorized use of privileged functions. The risk is limited to deployments where Discord voice is enabled and multiple users with different trust levels share the same channel. It does not bypass gateway authentication boundaries or introduce unauthenticated access. The severity is medium due to the requirement of specific deployment conditions and user participation in the same voice environment.

Upgrade OpenClaw CLI to version 2026.3.2 or later, which patches this issue by requiring explicit senderIsOwner flags in Discord voice transcript ingress and failing closed when owner status is unknown. Maintain regression tests to verify correct owner/non-owner handling in voice transcript processing. Avoid mixed-trust deployments where untrusted users share the same gateway or channel, as this is outside the recommended trust model.