N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-vqx8-9xxw-f2m7

GHSA-vqx8-9xxw-f2m7: OpenClaw's voice-call Twilio webhook replay could bypass manager dedupe because normalized event IDs were randomized per parse

Impact

Twilio webhook replay events could bypass voice-call manager dedupe because normalized event IDs were randomized per parse. A replayed event could be treated as new and trigger duplicate or stale call-state transitions.

Affected Packages / Versions

Package: openclaw (npm)
Vulnerable versions: <= 2026.2.22-2
Patched version (released): >= 2026.2.23

Remediation

The fix preserves provider event IDs through normalization, adds bounded replay dedupe in webhook security validation, and enforces per-call turn-token checks on call-state transitions.

Fix Commit(s)

1d28da55a5d0ff409e34999e0961157e9db0a2ab

Release Process Note

patched_versions is pre-set to the released version (2026.2.23) This advisory now reflects released fix version 2026.2.23.2.23`.

OpenClaw thanks @jiseoung for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-vqx8-9xxw-f2m7

GHSA-vqx8-9xxw-f2m7:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.2.23	2026.2.23

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability stems from two related issues in the voice call webhook processing logic. First, the system was susceptible to webhook replay attacks because it used a newly generated random UUID as the identifier for each incoming event. This meant that the deduplication mechanism, which checked for previously seen event IDs, was ineffective against replayed requests, as each replay would be assigned a new, unique ID. The vulnerable functions TwilioProvider.normalizeEvent and PlivoProvider.normalizeEvent were responsible for generating these random IDs. The processEvent function was then unable to detect these duplicates.

Second, the system was vulnerable to stale call-state transitions. A replayed speech event from a previous turn could be accepted for a new, active turn. This was because the resolveTranscriptWaiter function, which waits for a user's speech, did not validate that the incoming speech event was intended for the current interaction. The patch addresses this by introducing a turnToken that is generated for each turn in continueCall and validated in resolveTranscriptWaiter.

The overall fix involves multiple layers: introducing a stable dedupeKey based on provider-specific headers (like i-twilio-idempotency-token or Plivo's nonce) for reliable replay detection, adding a replay cache in webhook-security.ts to flag replayed requests early, and implementing the turnToken mechanism to prevent stale state transitions.

Vulnerable functions

processEvent

extensions/voice-call/src/manager/events.ts

The function used a randomized `event.id` for deduplicating webhook events. An attacker could replay a webhook request, which would generate a new `event.id`, bypassing the deduplication check and causing the event to be processed multiple times.

TwilioProvider.normalizeEvent

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.