A high-severity missing authorization vulnerability in the OpenClaw voice-call package allows remote callers to bypass security controls and execute unauthorized actions with the agent's authority.

This is a missing authorization vulnerability (CWE-862) where the voice-call package fails to propagate caller identity during inbound calls. This failure causes owner-only tool filtering to fail open, allowing any authenticated caller permitted by the inbound-call policy to exercise the full tool authority of the agent.

The exploitation of this vulnerability poses a severe risk to organizational data and infrastructure integrity. Because the flaw allows an attacker to drive tools intended for the trusted owner, it can lead to unauthorized data exfiltration, file modification, remote command execution, or the takeover of connected services. With a CVSS score of 8.8, this vulnerability represents a significant threat to business continuity and system confidentiality, necessitating immediate remediation.

Immediate Action: Update the @openclaw/voice-call package to version 2026.8.1 or later to ensure proper caller identity propagation and authorization enforcement.

Proactive Monitoring: Review system access logs for anomalous inbound call activity or unexpected tool execution patterns originating from external callers.

Compensating Controls: If immediate patching is not feasible, restrict inbound calling policies to the most restrictive settings possible or disable the voice-call functionality until the patch is applied.

Public Exploit Available: No (exploit_available: false)

Organizations utilizing the OpenClaw voice-call package must prioritize updating to version 2026.8.1 immediately. Given the potential for remote command execution and unauthorized data access, the window for remediation should be kept as narrow as possible. Failure to patch this vulnerability leaves the agent's tool authority exposed to any caller permitted by the inbound-call policy, creating a significant security gap.