https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 09:31:40 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-100544 <p>openclaw&#39;s @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller&#39;s identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent&#39;s normal tool authority to a remote caller. A caller who is admitted by the configured inbound-call policy (open, pairing, or allowlist) on a deployment with inbound calling enabled can therefore drive tools intended for the trusted owner, potentially reading data, modifying files, executing commands, or controlling connected services depending on the agent&#39;s configuration. The issue is fixed in 2026.8.1.</p> <p>openclaw&#39;s @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller&#39;s identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent&#39;s normal tool authority to a remote caller. A caller who is admitted by the configured inbound-call policy (open, pairing, or allowlist) on a deployment with inbound calling enabled can therefore drive tools intended for the trusted owner, potentially reading data, modifying files, executing commands, or controlling connected services depending on the agent&#39;s configuration. The issue is fixed in 2026.8.1.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-100544 https://vulnerability.circl.lu/vuln/ghsa-3w3q-3hpq-fv5m <p>openclaw&#39;s @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller&#39;s identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent&#39;s normal tool authority to a remote caller. A caller who is admitted by the configured inbound-call policy (open, pairing, or allowlist) on a deployment with inbound calling enabled can therefore drive tools intended for the trusted owner, potentially reading data, modifying files, executing commands, or controlling connected services depending on the agent&#39;s configuration. The issue is fixed in 2026.8.1.</p> <p>openclaw&#39;s @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller&#39;s identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent&#39;s normal tool authority to a remote caller. A caller who is admitted by the configured inbound-call policy (open, pairing, or allowlist) on a deployment with inbound calling enabled can therefore drive tools intended for the trusted owner, potentially reading data, modifying files, executing commands, or controlling connected services depending on the agent&#39;s configuration. The issue is fixed in 2026.8.1.</p> https://vulnerability.circl.lu/vuln/ghsa-3w3q-3hpq-fv5m