CVE-2026-28446 — AI Deep Analysis Summary

Q: What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: OpenClaw < 2026.2.1 has a critical **Inbound Allowlist Policy Bypass**. 📉 **Consequences**: Attackers can bypass access controls via voice-call extensions, leading to unauthorized remote access.

Q: Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: Flaw in **Inbound Allowlist Policy Validation**. Specifically, it allows bypass via **Empty Caller ID** and **Suffix Matching** logic errors. (CWE not specified in data).

Q: Who is affected? (Versions/Components)

👥 **Affected**: **OpenClaw** (Open-source AI Assistant). 📦 **Versions**: All versions **before 2026.2.1**. 🏢 **Vendor**: OpenClaw.

Q: What can hackers do? (Privileges/Data)

💀 **Attacker Actions**: Remote attackers can **bypass inbound access control**. ⚠️ **Impact**: High Confidentiality & Integrity impact (CVSS C:H, I:H), Low Availability impact (A:L).

Q: Is exploitation threshold high? (Auth/Config)

🔓 **Threshold**: **LOW**. 🌐 **Network**: Remote (AV:N). 🔑 **Auth**: None required (PR:N). 👁️ **UI**: None required (UI:N). 🎯 **Complexity**: Low (AC:L).

Q: Is there a public Exp? (PoC/Wild Exploitation)

🧪 **Public Exp?**: No specific PoC code provided in data. 📢 **Advisories**: VulnCheck and GitHub Security Advisory (GHSA-4rj2-gpmh-qq5x) confirm the flaw exists.

Q: How to self-check? (Features/Scanning)

🔍 **Self-Check**: Scan for **OpenClaw** installations. 📞 **Focus**: Check **voice-call extensions** for allowlist policy configurations. 🆚 **Version**: Verify if version is < 2026.2.1.

Q: Is it fixed officially? (Patch/Mitigation)

✅ **Fixed?**: **YES**. 🛠️ **Patch**: Version **2026.2.1** and later. 📝 **Commit**: See GitHub commit f8dfd034f5d9235c5485f492a9e4ccc114e97fdb.

Q: What if no patch? (Workaround)

🚧 **No Patch?**: Mitigate by restricting **inbound voice-call extensions**. 🚫 **Block**: Empty Caller IDs if possible. 🛑 **Isolate**: Limit network access to the service until patched.

Q: Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **HIGH**. 📈 **CVSS**: High severity (C:H, I:H). ⏳ **Action**: Patch immediately to 2026.2.1+ to prevent remote bypass attacks.

Updated May 06, 2026 CVSS 9.4 · Critical

This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis →

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: OpenClaw < 2026.2.1 has a critical **Inbound Allowlist Policy Bypass**. 📉 **Consequences**: Attackers can bypass access controls via voice-call extensions, leading to unauthorized remote access.

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: Flaw in **Inbound Allowlist Policy Validation**. Specifically, it allows bypass via **Empty Caller ID** and **Suffix Matching** logic errors. (CWE not specified in data).

Q3Who is affected? (Versions/Components)

👥 **Affected**: **OpenClaw** (Open-source AI Assistant). 📦 **Versions**: All versions **before 2026.2.1**. 🏢 **Vendor**: OpenClaw.

Q4What can hackers do? (Privileges/Data)

💀 **Attacker Actions**: Remote attackers can **bypass inbound access control**. ⚠️ **Impact**: High Confidentiality & Integrity impact (CVSS C:H, I:H), Low Availability impact (A:L).

Q5Is exploitation threshold high? (Auth/Config)

🔓 **Threshold**: **LOW**. 🌐 **Network**: Remote (AV:N). 🔑 **Auth**: None required (PR:N). 👁️ **UI**: None required (UI:N). 🎯 **Complexity**: Low (AC:L).

Q6Is there a public Exp? (PoC/Wild Exploitation)

🧪 **Public Exp?**: No specific PoC code provided in data. 📢 **Advisories**: VulnCheck and GitHub Security Advisory (GHSA-4rj2-gpmh-qq5x) confirm the flaw exists.

Q7How to self-check? (Features/Scanning)

🔍 **Self-Check**: Scan for **OpenClaw** installations. 📞 **Focus**: Check **voice-call extensions** for allowlist policy configurations. 🆚 **Version**: Verify if version is < 2026.2.1.

Q8Is it fixed officially? (Patch/Mitigation)

✅ **Fixed?**: **YES**. 🛠️ **Patch**: Version **2026.2.1** and later. 📝 **Commit**: See GitHub commit f8dfd034f5d9235c5485f492a9e4ccc114e97fdb.

Q9What if no patch? (Workaround)

🚧 **No Patch?**: Mitigate by restricting **inbound voice-call extensions**. 🚫 **Block**: Empty Caller IDs if possible. 🛑 **Isolate**: Limit network access to the service until patched.

Q10Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **HIGH**. 📈 **CVSS**: High severity (C:H, I:H). ⏳ **Action**: Patch immediately to 2026.2.1+ to prevent remote bypass attacks.

Continue exploring

Vulnerability detail Full AI analysis (login) OpenClaw