# CVE-2026-100544: openclaw voice-call authorization bypass in inbound calling

Source: https://junglewise.ai/threats/cve-2026-100544-openclaw-s-openclaw-voice-call-package-before-2026-8-1-launches  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-26. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-100544 · Severity: high · CVSS 8.8 · Published 2026-09-26

openclaw's voice-call package enables AI agents to handle inbound voice calls in enterprise deployments. Before version 2026.8.1, the system fails to verify the caller's identity and strips their non-owner status, allowing any admitted caller to execute owner-only actions. An attacker who passes the inbound call admission policy can read sensitive data, modify files, execute commands, or control connected services that the agent has access to.

Technologies: [Openclaw Voice-Call](https://junglewise.ai/threats/technologies/voice-call). Vendors: [Openclaw](https://junglewise.ai/threats/vendors/openclaw).

## Quick answers

**Is CVE-2026-100544 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-100544 being exploited in the wild.

**How severe is CVE-2026-100544?** High severity, with a CVSS score of 8.8, published 26 September 2026.

**Which products and versions are affected?** Openclaw Voice-Call before 2026.8.1.

**Is there a fix for CVE-2026-100544?** A patch was published on 2026-09-26: patched in version 2026.8.1 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-100544 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-100544?** Check whether you run Openclaw Voice-Call at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a missing authorization check (CWE-862) in the voice-call package's inbound call handler. Classic inbound voice calls launch the configured agent without propagating caller identity or non-owner status, causing owner-only tool filters to fail open. An unauthenticated remote attacker on the network can bypass the check by being admitted through an open, pairing, or allowlist inbound-call policy on a deployment with inbound calling enabled; the fix propagates caller identity information in version 2026.8.1 and later.

## Affected products

- openclaw voice-call before 2026.8.1

## Timeline

- 2026-09-26: disclosed
- 2026-09-26: patched: patched in version 2026.8.1

## References

- [https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh](https://github.com/openclaw/openclaw/security/advisories/GHSA-rrxp-5mx8-mvhh)
- [https://www.vulncheck.com/advisories/openclaw-voice-call-before-2026.8.1-authorization-bypass](https://www.vulncheck.com/advisories/openclaw-voice-call-before-2026.8.1-authorization-bypass)

## Related threats

- [OpenClaw resource exhaustion in voice-call media-stream WebSocket upgrade](https://junglewise.ai/threats/cve-2026-32062-openclaw-resource-exhaustion-in-voice-call-media-stream-websocket)
- [OpenClaw voice-call plugin webhook verification bypass in proxy configurations](https://junglewise.ai/threats/cve-2026-28465-openclaw-voice-call-plugin-webhook-verification-bypass)