Executive brief
OpenClaw is a voice communication platform that handles voice calls through Plivo integration. A vulnerability allows attackers who have captured valid callback tokens from live calls to manipulate callback origins during the replay validation process, potentially enabling unauthorized call handling or callback hijacking. Exploitation requires a captured callback from an active call, limiting real-world risk but still compromising call security.
Technical details
This vulnerability is a race condition (CWE-367) in OpenClaw's Plivo voice-call replay mechanism where the in-process callback origin is mutated before replay rejection validation occurs. An attacker with a previously captured valid callback from a live call can exploit the timing window to mutate the callback origin during replay, bypassing origin verification. The attack is network-reachable but requires possession of a legitimate captured callback, making it a post-compromise or man-in-the-middle scenario. The vulnerability allows callback origin spoofing that can persist through the initial validation logic. Patched in OpenClaw 2026.3.31; all versions prior to 2026.3.28 are affected.
Affected products
- OpenClaw openclaw <2026.3.31
Timeline
- 2026-03-31: disclosed
- 2026-03-31: patched: Fixed in version 2026.3.31