Skip to main content

Openclaw CVE-2026-28446

CRITICAL
Incorrect Implementation of Authentication Algorithm (CWE-303)
2026-03-05 disclosure@vulncheck.com GHSA-4rj2-gpmh-qq5x
Authentication Bypass AI / ML Openclaw
9.4
CVSS 3.1 · NVD
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Access
    Place inbound call with empty or spoofed caller ID
  2. Exploit
    Bypass allowlist validation using suffix matching
  3. Execution
    Access voice-call agent
  4. Impact
    Execute arbitrary tools

Vulnerability Assessment

Weakness
CWE
CWE-303
OWASP Top 10:2025
A07:2025 - Authentication Failures
ASVS 5.0
V6 - Authentication Authentication algorithm review
Exploitation Conditions

OpenClaw versions prior to 2026.2.1 with voice-call extension installed and enabled. Inbound allowlist policy must use suffix-based matching instead of strict equality validation. Remote unauthenticated attackers can exploit via direct network access to the voice-call service.
Impact

CVSS 9.4, EPSS 0.68%.
Exploit ScenarioDerived

Bypass authentication on inbound calls.
Act Now Prioritize within 24-48h. Why: CRITICAL severity + public POC available.
Patch available 0.7% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 12, 2026

Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.

Earlier versions of this analysis (1)
v1 Mar 12, 2026 - 22:06 CVSS 9.4

Voice call auth bypass in OpenClaw.

RemediationAI

Update.

Affected Packages

npm openclaw fix: 2026.2.2

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in npm

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

CWE-303.

Know when Openclaw gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 9.4 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
Low

Lifecycle Timeline

3
PoC Detected
Mar 11, 2026 - 14:16 vuln.today
Public exploit code
Patch released
Mar 11, 2026 - 14:16 nvd
Patch available
CVE Published
Mar 05, 2026 - 22:16 nvd
CRITICAL 9.4

DescriptionCVE.org

OpenClaw versions prior to 2026.2.1 with the voice-call extension installed and enabled contain an authentication bypass vulnerability in inbound allowlist policy validation that accepts empty caller IDs and uses suffix-based matching instead of strict equality. Remote attackers can bypass inbound access controls by placing calls with missing caller IDs or numbers ending with allowlisted digits to reach the voice-call agent and execute tools.

Executive ViewAI

Why It Matters

OpenClaw voice-call systems in your organization are vulnerable to authentication bypass attacks that could allow unauthorized callers to access restricted resources. With a critical severity rating and public exploit availability, this vulnerability poses immediate risk to call security and potential exposure of sensitive communications.

Business Impact: Severe
Compensating Controls

Apply vendor patch. If immediate patching is not feasible: disable voice-call extension until patch deployment; implement network-level caller ID validation and filtering; restrict inbound call sources to known IP ranges; enable enhanced logging for all inbound calls to detect exploitation attempts; consider temporary call routing restrictions to critical systems.

Threat Intelligence Overview

EPSS Score
0.7%
Top 29% exploitable
Exploit
POC
Public exploit code exists
Data Quality
4 sources
Confidence: Medium
NVD CVE.org EPSS GitHub

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity CRITICAL
CISA KEV No
Public POC Yes
EPSS 0.7%
Patch available Yes
Active threat No
Deciding rule
CRITICAL severity + public POC available
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Out-of-Cycle
Exploitation· derived
Poc
System Exposure· derived
Open
Automatable· derived
Yes
Human Impact
Very High

Priority Score

68
Low Medium High Critical
KEV: 0
EPSS: +1
CVSS: +47
PoC: +20
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Authentication Bypass CRITICAL

Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.

Affected Products (CPE)CVE.org

cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*

Related Vulnerabilities in OpenClaw Multiple Security Vulnerabilities

View all 46
CVE-2026-29613 MEDIUM
5.9
CVE-2026-29609 HIGH
7.5
CVE-2026-28479 HIGH
7.5
CVE-2026-28475 MEDIUM
4.8
CVE-2026-28469 HIGH
7.5
CVE-2026-28458 HIGH
8.1
CVE-2026-28457 MEDIUM
6.1
CVE-2026-28453 HIGH
7.5
CVE-2026-28456 HIGH
7.2
CVE-2026-28468 HIGH
7.7
CVE-2026-28394 MEDIUM
6.5
CVE-2026-28452 MEDIUM
5.5
CVE-2026-28450 MEDIUM
6.8
CVE-2026-28481 MEDIUM
6.5
CVE-2026-28467 MEDIUM POC
6.5
CVE-2026-29606 MEDIUM
6.5
CVE-2026-28474 CRITICAL
9.3
CVE-2026-28465 HIGH
8.2
CVE-2026-28459 HIGH
7.1
CVE-2026-28462 HIGH
7.5
CVE-2026-28472 HIGH
8.1
CVE-2026-29611 HIGH
7.5
CVE-2026-28393 HIGH
7.7
CVE-2026-28451 HIGH
8.3
CVE-2026-28477 HIGH
7.1
CVE-2026-28395 MEDIUM
6.3
CVE-2026-28480 MEDIUM POC
6.5
CVE-2026-28391 CRITICAL
9.8
CVE-2026-28392 HIGH
7.5
CVE-2026-28447 HIGH
8.1
CVE-2026-28448 HIGH POC
7.3
CVE-2026-28454 HIGH
7.5
CVE-2026-28463 HIGH
8.6
CVE-2026-28464 MEDIUM
5.9
CVE-2026-28466 CRITICAL
9.9
CVE-2026-28470 CRITICAL
9.2
CVE-2026-28471 MEDIUM
5.3
CVE-2026-28473 HIGH
8.1
CVE-2026-28476 MEDIUM
6.3
CVE-2026-28478 HIGH
7.5
CVE-2026-28482 HIGH
7.1
CVE-2026-28485 HIGH
8.4
CVE-2026-28486 MEDIUM
6.1
CVE-2026-29610 HIGH
8.8
CVE-2026-29612 MEDIUM
5.5

More in Openclaw

View all
CVE-2026-33579 CRITICAL POC
9.4 Mar 31

Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
CVE-2026-32042 HIGH POC
8.8 Mar 21

OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
CVE-2026-32051 HIGH POC
8.8 Mar 21

An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
CVE-2026-25253 HIGH POC
8.8 Feb 01

OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
CVE-2026-32846 HIGH POC
8.7 Mar 26

Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
CVE-2026-100530 HIGH POC
8.5 Sep 26

Directory-context bypass in OpenClaw before 2026.8.1 allows authenticated attackers with user interaction to reuse an 'a
CVE-2026-32064 HIGH POC
8.5 Mar 21

Unauthenticated access to the noVNC observer interface in OpenClaw's Docker sandbox browser allows anyone who can reach

CVE-2026-32055 HIGH POC
7.6 Mar 21

OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
CVE-2026-32056 HIGH POC
7.5 Mar 21

OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
CVE-2026-32049 HIGH POC
7.5 Mar 21

OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
CVE-2026-32048 HIGH POC
7.5 Mar 21

OpenClaw versions prior to 2026.3.1 contain a sandbox escape vulnerability that allows authenticated attackers with low

CVE-2026-25474 HIGH POC
7.5 Feb 19

OpenClaw versions 2026.1.30 and below fail to validate Telegram webhook secret tokens when `channels.telegram.webhookSec

Same weakness CWE-303 – Incorrect Implementation of Authentication Algorithm

View all
CVE-2023-29357 CRITICAL POC
9.8
CVE-2025-13390 CRITICAL POC
10.0
CVE-2025-66489 CRITICAL POC
9.8
CVE-2025-57808 HIGH POC
8.1
CVE-2016-9463 HIGH POC
8.1
CVE-2026-43640 HIGH POC
8.6
CVE-2025-44557 HIGH POC
8.1
CVE-2021-21902 HIGH POC
8.1

Same technique Authentication Bypass

View all
CVE-2015-3306 CRITICAL POC
10.0
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3

References

Advisories & patches
PATCH https://github.com/openclaw/openclaw/commit/f8dfd034f5d9235c5485f492a9e4ccc114e97fdb REF https://www.vulncheck.com/advisories/openclaw-inbound-allowlist-policy-bypass-in-voice-call-extension-via-empty-caller-id

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy