MEDIUM
GHSA-jp4j-q5fc-58gv
OpenClaw's Discord component interaction ingress skips guild/channel policy enforcement
상세
## Summary
Discord button and component interaction ingress did not consistently reapply the same guild and channel policy gates used for normal inbound messages.
## Impact
Users could trigger privileged component actions from contexts that should have been blocked by Discord channel policy.
## Affected Component
`extensions/discord/src/monitor/agent-components.ts`
## Fixed Versions
- Affected: `>= 2026.2.14, <= 2026.3.24` - Patched: `>= 2026.3.28` - Latest stable `2026.3.28` contains the fix.
## Fix
Fixed by commit `511093d4b3` (`Discord: apply component interaction policy gates`).
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.