CVE-2026-28446

The vulnerability results from two related logical errors (CWE-303) in allowlist policy validation for incoming calls. First, the mechanism accepts empty caller ID identifiers instead of rejecting them. Second, matching the caller number against the allowlist is performed by checking the suffix (suffix-based matching) instead of strict equality (strict equality). An attacker can make a call with a missing caller ID or provide a number whose ending matches any entry on the allowlist, resulting in access being granted to the voice agent.

A remote, unauthenticated attacker can bypass access control to a voice-call agent and execute available tools (tools) of that agent, which may lead to unauthorized disclosure or modification of data handled by the voice component.

OpenClaw should be updated to version 2026.2.1 or newer. Patch details are available in the GitHub repository (commit f8dfd034) and in the official security advisory GHSA-4rj2-gpmh-qq5x. Until the update is applied, it is recommended to disable the voice-call extension or restrict network access to the component handling incoming calls.

OpenClaw in versions earlier than 2026.2.1 with the voice-call extension installed and enabled.