A critical authentication bypass in OpenClaw’s voice-call extension enables remote, unauthenticated attackers to execute unauthorized commands, posing a severe risk to system integrity.

This is an authentication bypass flaw caused by improper validation of inbound caller IDs. The extension incorrectly uses suffix-based matching instead of strict equality, allowing unauthenticated attackers to spoof or manipulate caller IDs to bypass access controls.

The ability for an unauthenticated attacker to execute tools via the voice-call agent carries a critical business impact, potentially leading to unauthorized data access, system manipulation, or complete service disruption. With a CVSS score of 9.8, the vulnerability represents the highest level of risk, as it requires no user interaction or prior authentication to exploit.

Immediate Action: Update the OpenClaw package to version 2026.2.2 or later as specified by the OSV advisory.

Proactive Monitoring: Audit inbound voice-call logs for unusual caller IDs or repeated attempts to initiate agent tools from unknown or unauthorized numbers.

Compensating Controls: If an immediate update is not feasible, disable the voice-call extension entirely to neutralize the attack surface.

Public Exploit Available: Unknown

Given the critical CVSS severity and the ease of exploitation, organizations must prioritize patching this vulnerability immediately. Ensure all instances of OpenClaw are updated to version 2026.2.2 to remediate the flaw and prevent potential unauthorized remote tool execution.