CVE-2026-100546 OpenClaw CVE debrief

Who should care

Defenders responsible for OpenClaw deployments using Discord voice transcripts should assess exposure and prioritize patching. This includes OpenClaw users with Discord voice transcript functionality, security teams managing OpenClaw integrations, and operators relying on accurate speaker ownership in voice transcripts. Defenders should also review compensating controls and monitor for potential misuse.

Why it matters

CVE-2026-100546 is a race condition vulnerability in OpenClaw's Discord voice transcript handling. Defenders should prioritize patching to prevent potential misclassification of speaker ownership and incorrect application of owner-sensitive behavior.

• Potential misclassification of speaker ownership in voice transcripts
• Incorrect application of owner-sensitive behavior to non-owner participants

Technical summary

The OpenClaw npm package versions >= 2026.7.2 and < 2026.9.2 contain a race condition in the Discord realtime voice transcript path. This could cause a transcript to inherit another speaker's owner status, potentially leading to incorrect application of owner-sensitive behavior. The issue arises from concurrent control-classified voice transcripts consuming speaker context belonging to another participant after an asynchronous control check. Exploitation depends on concurrent transcript timing and on the tools and commands available to the affected agent.

Defensive priority

Defenders should prioritize patching to prevent potential misclassification of speaker ownership in voice transcripts.

Recommended defensive actions

• Patch OpenClaw to version 2026.9.2 or later
• Disable Discord realtime voice for agents that distinguish owner and non-owner senders as a workaround
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance

Evidence notes

The CVE record and NVD entry provide details on the vulnerability. However, additional information from the vendor and other sources is limited. Defenders should verify the affected versions and configurations in their environments. The OpenClaw npm package's Discord voice transcript handling is impacted, and patching to version 2026.9.2 or later is recommended. Evidence of exploitation is not currently available, but defenders should monitor for potential misuse.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.