Openclaw cli: OpenClaw's voice-call Twilio webhook replay could bypass manager dedupe because normalized event IDs were randomized per parse (CVE-2026-32053)
Description
OpenClaw CLI versions before 2026.2.23 have a vulnerability where Twilio webhook replay events could bypass the voice-call manager's deduplication mechanism. This happens because normalized event IDs were randomized on each parse, allowing replayed events to be treated as new and potentially causing duplicate or stale call-state transitions. The issue is fixed in version 2026.2.23 by preserving provider event IDs during normalization, adding bounded replay deduplication in webhook validation, and enforcing per-call turn-token checks.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenClaw CLI vulnerability (CVE-2026-32053) involves Twilio webhook replay events bypassing the voice-call manager's deduplication due to randomized normalized event IDs per parse. This flaw allows replayed webhook events to be processed as new, triggering duplicate or stale call-state transitions. The vulnerability affects openclaw npm package versions from 2026.1.29 up to but not including 2026.2.23. The patch, released in version 2026.2.23, addresses the issue by preserving original provider event IDs during normalization, implementing bounded replay deduplication in webhook security validation, and enforcing per-call turn-token checks on call-state transitions.
Potential Impact
Replay of Twilio webhook events can bypass deduplication in the voice-call manager, causing duplicate or stale call-state transitions. This may lead to inconsistent call states or unintended behavior in voice-call handling within affected OpenClaw CLI versions.
Mitigation Recommendations
A fix is available in OpenClaw CLI version 2026.2.23 and later. Users should upgrade to version 2026.2.23 or newer to mitigate this vulnerability. The patch preserves provider event IDs, adds bounded replay deduplication in webhook validation, and enforces per-call turn-token checks. No additional mitigation steps are required beyond applying the official update.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-32053
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 4.0
Threat ID: 6ac245b912601ec6a3166bd7
Added to database: 10/04/2026, 12:25:29 UTC
Last enriched: 10/04/2026, 13:02:34 UTC
Last updated: 10/04/2026, 16:08:37 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.