N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-89r3-6x4j-v7wf

GHSA-89r3-6x4j-v7wf: OpenClaw: Voice-call Plivo replay mutates in-process callback origin before replay rejection

Summary

Voice-call Plivo replay mutates in-process callback origin before replay rejection

Current Maintainer Triage

Status: narrow
Normalized severity: low
Assessment: v2026.3.28 can still mutate Plivo callback origin before replay rejection, but this needs a captured valid callback for a live call so medium is overstated.

Affected Packages / Versions

Package: openclaw (npm)
Latest published npm version: 2026.3.31
Vulnerable version range: <=2026.3.28
Patched versions: >= 2026.3.31
First stable tag containing the fix: v2026.3.31

Fix Commit(s)

efe9183f9d2fd5e01c8068fa01f4a07a58a63c0b — 2026-03-31T19:50:35+09:00

Release Process Note

The fix is already present in released version 2026.3.31.
This draft looks ready for final maintainer disposition or publication, not additional code-fix work.

Thanks @zsxsoft for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-89r3-6x4j-v7wf

GHSA-89r3-6x4j-v7wf:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.3.28	2026.3.31

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability, GHSA-89r3-6x4j-v7wf, exists in the Plivo voice call provider of OpenClaw. The application was susceptible to a replay attack where the origin of a voice call callback could be mutated. This was because the callback URL was being constructed using the Host header from the incoming webhook request, which an attacker could control. The patch in commit efe9183f9d2fd5e01c8068fa01f4a07a58a63c0b rectifies this by prioritizing a configured publicUrl for constructing the base of the callback URL, thus ignoring the potentially malicious Host header.

The primary vulnerable function is PlivoProvider.baseWebhookUrlFromCtx in extensions/voice-call/src/providers/plivo.ts, which was responsible for the insecure construction of the URL. The function PlivoProvider.parseWebhookEvent is the entry point that processes the webhook and would be observed in a stack trace during an exploit, as it initiates the vulnerable logic.

Vulnerable functions

PlivoProvider.baseWebhookUrlFromCtx

extensions/voice-call/src/providers/plivo.ts

This function was vulnerable because it constructed the base webhook URL from the incoming request context, which could include a malicious `Host` header provided by an attacker. This would cause the application to store a callback URL pointing to an attacker-controlled domain, leading to a replay attack where the callback origin is mutated.

PlivoProvider.parseWebhookEvent

extensions/voice-call/src/providers/plivo.ts

This function is the entry point for processing Plivo webhook events. It receives the webhook request, including the potentially malicious `Host` header, and then calls `baseWebhookUrlFromCtx` to construct the callback URL. Therefore, this function is a key part of the vulnerable execution path that would appear in a runtime profile during exploitation.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.