https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T17:34:28.813397+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-28446 CVE-2026-28446 — OpenClaw < 2026.2.1 - Inbound Allowlist Policy Bypass in voice-call Extension via Empty Caller ID and Suffix Matching 2026-09-28T17:34:28.816165+00:00

Affected: OpenClaw

OpenClaw versions prior to 2026.2.1 with the voice-call extension installed and enabled contain an authentication bypass vulnerability in inbound allowlist policy validation that accepts empty caller IDs and uses suffix-based matching instead of strict equality. Remote attackers can bypass inbound access controls by placing calls with missing caller IDs or numbers ending with allowlisted digits to reach the voice-call agent and execute tools.

 https://vulnerability.circl.lu/vuln/ghsa-4rj2-gpmh-qq5x GHSA-4rj2-gpmh-qq5x — OpenClaw has an inbound allowlist policy bypass in voice-call extension (empty caller ID + suffix matching) 2026-09-28T17:34:28.816261+00:00

Affected: npm: openclaw

### Summary

An authentication bypass in the optional `voice-call` extension/plugin allowed unapproved or anonymous callers to reach the voice-call agent when inbound policy was set to `allowlist` or `pairing`.

Deployments that do not install/enable the `voice-call` extension are not affected.

### Affected Packages / Versions

- `openclaw` (npm): `<= 2026.2.1` - Fixed in: `>= 2026.2.2`

### Details

In affected versions (for example `2026.2.1`), the inbound allowlist check in `extensions/voice-call/src/manager.ts` used suffix-based matching and accepted empty caller IDs after normalization.

This allowed two bypasses:

1. Missing/empty `from` values normalized to an empty string, which caused the allowlist predicate to evaluate as allowed. 2. Suffix-based matching meant any caller number whose digits ended with an allowlisted number would be accepted.

### Proof Of Concept

1. Configure the voice-call extension with `inboundPolicy: allowlist` and `allowFrom: ["+15550001234"]`. 2. Place/trigger an inbound call with missing/empty caller ID (provider-dependent; for example anonymous/restricted caller). The call is accepted. 3. Place a call from a number whose E.164 digits end with `15550001234` (for example `+99915550001234`). The call is accepted.

### Impact

Only operators who install/enable the optional `voice-call` extension and use `inboundPolicy=allowlist` or `pairing` could have inbound access controls bypassed, potentially allowing unauthorized callers to reach auto-…