A vulnerability in the OpenClaw npm package causes Discord component interaction to misclassify Group Direct Messages (Group DMs) as Direct Messages (DMs). This flaw affects versions prior to 2026.3.31 and can lead to incorrect policy enforcement or session handling related to Group DMs. The issue is classified as medium severity with a CVSS score of 5.4. A fix has been released in version 2026.3.31.