What is the CVSS score of CVE-2026-26319?

CVE-2026-26319 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of AI / ML are affected by CVE-2026-26319?

OpenClaw's voice call plugin contains a critical authentication bypass that allows attackers to forge incoming call events without valid credentials when security keys are misconfigured.. A patch is available.

How to fix or mitigate CVE-2026-26319?

Within 24 hours: audit all OpenClaw deployments to identify instances running versions 2026.2.13 or below with the @openclaw/voice-call plugin enabled; verify telnyx.publicKey configuration status across all environments. Within 7 days: apply the available patch to all affected instances and validate that telnyx.publicKey is properly configured with valid credentials. Within 30 days: conduct security review of all webhook integrations, implement webhook signature validation testing, and establish configuration audit procedures to prevent similar misconfigurations.

AI / ML CVE-2026-26319

HIGH

Missing Authentication for Critical Function (CWE-306)

2026-02-19 security-advisories@github.com

GHSA-4hg8-92x6-h2f3

Authentication Bypass AI / ML Openclaw

7.5

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:03 vuln.today

Patch released

Feb 20, 2026 - 19:03 nvd

Patch available

CVE Published

Feb 19, 2026 - 23:16 nvd

HIGH 7.5

DescriptionGitHub Advisory

OpenClaw is a personal AI assistant. Versions 2026.2.13 and below allow the optional @openclaw/voice-call plugin Telnyx webhook handler to accept unsigned inbound webhook requests when telnyx.publicKey is not configured, enabling unauthenticated callers to forge Telnyx events. Telnyx webhooks are expected to be authenticated via Ed25519 signature verification. In affected versions, TelnyxProvider.verifyWebhook() could effectively fail open when no Telnyx public key was configured, allowing arbitrary HTTP POST requests to the voice-call webhook endpoint to be treated as legitimate Telnyx events. This only impacts deployments where the Voice Call plugin is installed, enabled, and the webhook endpoint is reachable from the attacker (for example, publicly exposed via a tunnel/proxy). The issue has been fixed in version 2026.2.14.

AnalysisAI

OpenClaw's Telnyx voice-call webhook handler fails to validate webhook signatures when the public key is not configured, allowing unauthenticated attackers to forge arbitrary Telnyx events. This affects only deployments with the Voice Call plugin installed, enabled, and publicly accessible, enabling attackers to inject malicious voice-call events into the system. A patch is available.

Technical ContextAI

Classified as CWE-306 (Missing Authentication for Critical Function). Affects the Telnyx webhook component of Openclaw. OpenClaw is a personal AI assistant. Versions 2026.2.13 and below allow the optional @openclaw/voice-call plugin Telnyx webhook handler to accept unsigned inbound webhook requests when telnyx.publicKey is not configured, enabling unauthenticated callers to forge Telnyx events. Telnyx webhooks are expected to be authenticated via Ed25519 signature verification. In affected versions, TelnyxProvider.verifyWebhook() could effectively fail open when no Telnyx public key was configured, allowing arbit