OpenClaw/Clawdbot/Moltbot up to 2026.2.13 Voice Call Plugin verifyWebhook missing authentication

Summaryinfo

A vulnerability labeled as critical has been found in OpenClaw, Clawdbot and Moltbot up to 2026.2.13. The affected element is the function verifyWebhook of the component Voice Call Plugin. Executing a manipulation can lead to missing authentication. This vulnerability is handled as CVE-2026-26319. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in OpenClaw, Clawdbot and Moltbot up to 2026.2.13. It has been declared as critical. This vulnerability affects the function verifyWebhook of the component Voice Call Plugin. The manipulation with an unknown input leads to a missing authentication vulnerability. The CWE definition for the vulnerability is CWE-306. The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

OpenClaw is a personal AI assistant. Versions 2026.2.13 and below allow the optional @openclaw/voice-call plugin Telnyx webhook handler to accept unsigned inbound webhook requests when telnyx.publicKey is not configured, enabling unauthenticated callers to forge Telnyx events. Telnyx webhooks are expected to be authenticated via Ed25519 signature verification. In affected versions, TelnyxProvider.verifyWebhook() could effectively fail open when no Telnyx public key was configured, allowing arbitrary HTTP POST requests to the voice-call webhook endpoint to be treated as legitimate Telnyx events. This only impacts deployments where the Voice Call plugin is installed, enabled, and the webhook endpoint is reachable from the attacker (for example, publicly exposed via a tunnel/proxy). The issue has been fixed in version 2026.2.14.

The advisory is shared for download at github.com. This vulnerability was named CVE-2026-26319 since 02/13/2026. The exploitation appears to be difficult. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are known technical details, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 299797 (OpenClaw < 2026.2.14 Multiple Vulnerabilities), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 2026.2.14 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying the patch 29b587e73cbdc941caec573facd16e87d52f007b is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the vulnerability database at Tenable (299797). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Artificial Intelligence Software

Name

• Clawdbot
• Moltbot
• OpenClaw

Version

• 2026.2.0
• 2026.2.1
• 2026.2.2
• 2026.2.3
• 2026.2.4
• 2026.2.5
• 2026.2.6
• 2026.2.7
• 2026.2.8
• 2026.2.9
• 2026.2.10
• 2026.2.11
• 2026.2.12
• 2026.2.13

License

• open-source

Website

• Product: https://github.com/openclaw/openclaw/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion