CVE-2026-100544
Received Received - Intake

Voice Call Agent Privilege Escalation in OpenClaw

Publication date: 2026-09-26

Last updated on: 2026-09-26

Assigner: VulnCheck

Description
openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic inbound voice calls without propagating the caller's identity or non-owner status. As a result, owner-only tool filtering can fail open and expose the agent's normal tool authority to a remote caller. A caller who is admitted by the configured inbound-call policy (open, pairing, or allowlist) on a deployment with inbound calling enabled can therefore drive tools intended for the trusted owner, potentially reading data, modifying files, executing commands, or controlling connected services depending on the agent's configuration. The issue is fixed in 2026.8.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-26
Last Modified
2026-09-26
Generated
2026-09-26
AI Q&A
2026-09-26
EPSS Evaluated
N/A
NVD
CVE-2026-100544
EUVD
EUVD-2026-87506

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
openclaw voice-call to 2026.8.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The vulnerability in openclaw's @openclaw/voice-call package before version 2026.8.1 allows a remote caller to bypass owner-only tool filtering during inbound voice calls. The caller's identity or non-owner status is not properly checked, enabling them to use the agent's tools as if they were the trusted owner. This could lead to unauthorized access to data, file modifications, command execution, or control over connected services depending on the agent's setup.

Detection Guidance

To detect this vulnerability, check the installed version of the @openclaw/voice-call package. If it is below 2026.8.1, the system is vulnerable. Run: npm list @openclaw/voice-call or npm view @openclaw/voice-call version. If inbound calling is enabled, verify if caller identity and non-owner status are properly enforced.

Impact Analysis

If you use openclaw's voice-call package before 2026.8.1 with inbound calling enabled, a remote caller admitted by your policy (open, pairing, or allowlist) could exploit this to access sensitive tools and data. This may result in data breaches, unauthorized system changes, or control over connected services, depending on the agent's configured permissions.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR's data protection principles and HIPAA's security requirements. Organizations using affected versions may face compliance violations, legal penalties, and reputational damage due to potential data exposure or unauthorized system access.

Mitigation Strategies

Update the @openclaw/voice-call package to version 2026.8.1 or later to fix the vulnerability. Disable inbound calling if not required or restrict caller policies to trusted sources only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100544. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart