CVE-2026-100544 openclaw voice-call before 2026.8.1 Authorization Bypass
Remote callers can bypass owner-only tool filtering to execute commands and access data if inbound calling is enabled.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-100544?
CVE-2026-100544 is a high-severity missing authorization vulnerability in openclaw voice-call, published on 26 Sep 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent's normal tool authority to a remote caller. A caller who is admitted by the configured inbound-call policy (open, pairing, or allowlist) on a deployment with inbound calling enabled can therefore drive tools intended for the trusted owner, potentially reading data, modifying files, executing commands, or controlling connected services depending on the agent's configuration. The issue is fixed in 2026.8.1.
Weakness: CWE-862
Which versions are affected by CVE-2026-100544?
How do I fix CVE-2026-100544?
Upgrade to a fixed version.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-100544 being exploited?
There is no known exploitation of CVE-2026-100544 in the wild and no public exploit code.
Sources
Also known as GHSA-3w3q-3hpq-fv5m, GHSA-rrxp-5mx8-mvhh, MINI-gfjf-rqg4-gp9c.