Openclaw cli: OpenClaw has an inbound allowlist policy bypass in voice-call extension (empty caller ID + suffix matching) (CVE-2026-28446)

CVE-2026-28446 describes an authentication bypass in the openclaw-cli voice-call extension when inbound policy is set to allowlist or pairing. The vulnerability arises from two issues: empty or missing caller IDs normalize to an empty string, which the allowlist check incorrectly permits, and suffix-based matching allows any caller number ending with an allowlisted number to be accepted. This permits unauthorized inbound calls to reach voice-call agents. The vulnerability affects openclaw-cli versions <= 2026.2.1 and is fixed in >= 2026.2.2 by rejecting calls with missing caller IDs and requiring exact matches for caller IDs against the allowlist.

Operators using the voice-call extension with inboundPolicy set to allowlist or pairing may have their inbound access controls bypassed. This could allow unauthorized or anonymous callers to reach auto-response systems and potentially execute tools or commands, impacting confidentiality and integrity of the system. The CVSS score is 9.4 (critical), indicating high impact on confidentiality and integrity with low attack complexity and no required privileges or user interaction.

A fix is available in openclaw-cli version 2026.2.2 and later. Users should upgrade to this version or newer to mitigate the vulnerability. The fix rejects inbound calls with missing caller IDs and enforces strict equality checks for allowlisted caller IDs, eliminating the bypasses. Deployments not using the voice-call extension are not affected.