OpenClaw versions 2026.4.7 before 2026.4.10 contain a vulnerability where Discord event cover image parameters fail to be properly normalized during sandbox media processing. This flaw allows attackers to bypass media normalization controls and inject host-local media references into channel action paths that expect normalized media. The vulnerability affects the application's ability to safely process Discord event cover images within its sandboxed environment. Successful exploitation could lead to unauthorized access to local media resources. The issue has been addressed in version 2026.4.10 and later releases.