OpenClaw versions 2026.6.6 before 2026.6.9 have an authorization bypass vulnerability affecting Discord guild actions. This flaw allows lower-trust callers to perform actions that normally require stronger authorization. The vulnerability arises from misconfigured input paths that enable skipping cross-provider requester authorization, leading to execution of restricted operations.