EUVD-2026-21103
GHSA-j56c-wpqm-h24x
Severity by source
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
6Blast Radius
ecosystem impact- 2 npm packages depend on openclaw (2 direct, 0 indirect)
Ecosystem-wide dependent count for version 2026.3.23.
DescriptionCVE.org
OpenClaw before 2026.3.23 contains a replay identity vulnerability in Plivo V2 signature verification that allows attackers to bypass replay protection by modifying query parameters. The verification path derives replay keys from the full URL including query strings instead of the canonicalized base URL, enabling attackers to mint new verified request keys through unsigned query-only changes to signed requests.
AnalysisAI
OpenClaw's Plivo V2 signature verification implementation allows remote attackers to bypass replay protection and forge authenticated requests by manipulating URL query parameters. The flaw affects OpenClaw versions before 2026.3.23 and stems from deriving replay protection keys from the full URL including query strings rather than the canonical base URL, enabling attackers to create new valid request signatures by modifying only query parameters on previously signed requests. With 8% EPSS percentile and high attack complexity (AC:H), this represents moderate real-world risk despite the 8.3 CVSS score. Public proof-of-concept commits demonstrate the vulnerability, though no active exploitation is confirmed.
Technical ContextAI
This vulnerability affects OpenClaw's integration with Plivo's V2 webhook signature verification system. Plivo is a cloud communications platform that signs outbound webhook requests to prove authenticity. The flaw is a replay identity vulnerability (CWE-294: Authentication Bypass by Capture-replay) where the signature verification implementation incorrectly includes query string parameters when deriving cryptographic replay protection keys. Standard webhook signature schemes should verify signatures against a canonicalized URL (typically just scheme, host, and path) to prevent parameter tampering. By including mutable query parameters in the key derivation, OpenClaw creates distinct replay keys for what should be treated as the same endpoint, allowing an attacker who intercepts one valid signed request to mint unlimited variant requests by appending or modifying query parameters while maintaining signature validity. The affected component is specifically the Plivo V2 signature verification module in OpenClaw versions prior to 2026.3.23.
RemediationAI
Upgrade OpenClaw to version 2026.3.23 or later, which corrects the replay key derivation to use canonicalized base URLs excluding query parameters. The vendor has released two patch commits: https://github.com/openclaw/openclaw/commit/630f1479c44f78484dfa21bb407cbe6f171dac87 and https://github.com/openclaw/openclaw/commit/b0ce53a79cf63834660270513e26d921899b4e5b. Organizations unable to immediately upgrade should implement compensating controls: validate all Plivo webhook requests against expected source IP ranges documented in Plivo's webhook security documentation to reduce interception risk, implement additional application-layer request validation beyond signature verification such as checking timestamp freshness and maintaining a database of processed request IDs to detect replay attempts, and enable comprehensive logging of all Plivo webhook requests including full URLs and signatures for forensic analysis. Note that IP-based filtering may break if Plivo changes webhook source ranges, requiring allowlist updates. Request ID tracking introduces state management overhead but provides defense-in-depth against replay attacks. Review application logs for suspicious patterns of webhook requests with varying query parameters to the same endpoints as potential indicators of exploitation attempts.
Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
OpenClaw sandbox browser functionality launches x11vnc for noVNC observer sessions without requiring authentication, all
OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
OpenClaw versions prior to 2026.3.1 contain a sandbox escape vulnerability that allows authenticated attackers with low
OpenClaw versions 2026.1.30 and below fail to validate Telegram webhook secret tokens when `channels.telegram.webhookSec
Same weakness CWE-294 – Authentication Bypass by Capture-replay
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today