CVE-2026-100544: openclaw voice-call before 2026.8.1 Authorization Bypass

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-26 · updated 2026-10-08
Weakness: CWE-862

Description

openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent's normal tool authority to a remote caller. A caller who is admitted by the configured inbound-call policy (open, pairing, or allowlist) on a deployment with inbound calling enabled can therefore drive tools intended for the trusted owner, potentially reading data, modifying files, executing commands, or controlling connected services depending on the agent's configuration. The issue is fixed in 2026.8.1.

Affected products

openclaw voice-call: before 2026.8.1 — fixed in 2026.8.1

How to fix

Upgrade to a fixed version: openclaw voice-call 2026.8.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-100544 or the next vulnerability affects your stack