EUVD-2026-13954
GHSA-3r78-rqg8-95gg
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A07:2025 - Authentication Failures
ASVS 5.0
V6 - Authentication Replay attack prevention
|
| Impact | The CVSS 6.5 score (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) reflects a network-exploitable vulnerability requiring no privilege or user interaction, with low attack complexity and localized integrity and availability impact. The attack vector (AV:N) and lack of authentication requirements (PR:N) are significant risk factors; however, the impact is bounded to integrity and availability without confidentiality loss. The vulnerability is classified under an authentication bypass tag, though the root issue is cryptographic verification failure rather than authentication logic per se. Real-world risk depends on: (1) whether the Twilio webhook endpoint is internet-exposed without additional network controls, (2) the business criticality of call-state accuracy in the deployment, and (3) the rate-limiting and monitoring of webhook event processing. For organizations relying on OpenClaw for VoIP or call center operations where stale state could cause service disruption or financial loss, this is a legitimate moderate-to-high priority. A patch is available, reducing overall urgency compared to zero-day situations. |
| Exploit ScenarioDerived | An attacker intercepts or captures a legitimate Twilio webhook event (e.g., a call completion or status update notification) sent to the OpenClaw webhook endpoint. The attacker replays this webhook to the same endpoint multiple times. Because OpenClaw's deduplication generates randomized normalized IDs on each parse, each replay appears as a new event and bypasses the manager's dedupe check. This causes OpenClaw to process stale call-state transitions multiple times, potentially triggering duplicate call records, incorrect billing, missed call routing, or state machine corruption (e.g., attempting to hang up a call that no longer exists). Since the attack requires only network access to the webhook endpoint (AV:N, PR:N) and the payload is a standard HTTP POST, the barrier to exploitation is low. No explicit public POC has been confirmed, but the vulnerability is straightforward to reproduce given access to Twilio webhook documentation and a test OpenClaw instance. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 21, 2026
OpenClaw versions prior to 2026.2.23 contain a webhook event deduplication bypass vulnerability where normalized Twilio event IDs are randomized on each parse, allowing attackers to replay webhook events and circumvent the manager's deduplication checks. An unauthenticated remote attacker can exploit this over the network to trigger duplicate or stale call-state transitions, potentially causing incorrect call handling and state corruption. While no CVSS modifier for active exploitation or public POC is explicitly confirmed in the provided intelligence, the CVSS 6.5 score reflects moderate integrity and availability impact with low attack complexity.
RemediationAI
Upgrade OpenClaw to version 2026.2.23 or later immediately; this is the primary fix as a patch is available from the vendor. Apply the commit 1d28da55a5d0ff409e34999e0961157e9db0a2ab or pull the latest stable release from the GitHub repository (https://github.com/openclaw/openclaw). As an interim mitigation pending deployment, implement network-level access controls to restrict Twilio webhook sources to documented Twilio IP ranges, enable webhook event logging and monitoring to detect replay patterns (e.g., duplicate event IDs arriving in quick succession), and consider implementing an additional application-level deduplication layer that persists event IDs in a distributed cache (Redis, DynamoDB) to ensure stable, non-randomized identifiers survive process restarts. Verify the patch by confirming that event ID normalization produces deterministic output and test Twilio webhook replay scenarios in a staging environment before production rollout.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in npm
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability exists in OpenClaw's Twilio webhook event handling mechanism, specifically in the event deduplication logic (CWE-294: Improper Verification of Cryptographic Signature). Twilio sends webhook notifications for call events; OpenClaw should deduplicate these by storing and comparing normalized event IDs. However, the normalization process generates randomized IDs on each parse rather than producing consistent, deterministic identifiers. This violates the fundamental principle that idempotent deduplication requires stable, deterministic identifiers. The affected product is OpenClaw (CPE: cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*), with versions prior to 2026.2.23 impacted. The root cause is improper cryptographic or hash-based signature verification in the webhook validation chain, allowing replayed events to bypass integrity checks.
Know when Openclaw gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
OpenClaw versions prior to 2026.2.23 contain a vulnerability in Twilio webhook event deduplication where normalized event IDs are randomized per parse, allowing replay events to bypass manager dedupe checks. Attackers can replay Twilio webhook events to trigger duplicate or stale call-state transitions, potentially causing incorrect call handling and state corruption.
Executive ViewAI
CVE-2026-32053 presents notable security risk rated CVSS 6.5. Exploitation could compromise the security of affected deployments. Proof-of-concept code is publicly available. A patch is available and should be applied during regular vulnerability management.
Apply vendor patch. If patching is delayed: restrict network access and enable monitoring.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Related Vulnerabilities in OpenClaw Multiple Authorization and Command Execution
View all 20Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
Authentication bypass in OpenClaw before 2026.5.3 allows remote attackers with low privileges to receive agent responses
Directory-context bypass in OpenClaw before 2026.8.1 allows authenticated attackers with user interaction to reuse an 'a
Exploit-DB