Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.7

openclaw voice-call lets callers use owner tools

CVE-2026-100544 · published 16 days ago
Summary

The openclaw/voice-call component before version 2026.8.1 does not correctly identify who is calling when a voice call comes in. This means a remote caller can be treated as the trusted owner and use tools that should be restricted, potentially reading data, changing files, or controlling services. Upgrade to version 2026.8.1 or later to fix the problem.

What to do
  • Update openclaw voice-call to version 2026.8.1 or later.
Affected software
VendorProductAffected versions
openclaw voice-call < 2026.8.1
Original advisory text
openclaw voice-call before 2026.8.1 Authorization Bypass
openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent's normal tool authority to a remote caller. A caller who is admitted by the configured inbound-call policy (open, pairing, or allowlist) on a deployment with inbound calling enabled can therefore drive tools intended for the trusted owner, potentially reading data, modifying files, executing commands, or controlling connected services depending on the agent's configuration. The issue is fixed in 2026.8.1.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.7 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-862Missing Authorization
Timeline
Published26 Sep 2026
Updated9 Oct 2026
First seen26 Sep 2026
Sources
CVE-2026-100544 · NVD
CVE-2026-100544 · MITRE
CVE-2026-100544 · OSV
GHSA-rrxp-5mx8-mvhh · GHSA
Track software like this
Free during beta