漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
OpenClaw < 2026.2.1 - Inbound Allowlist Policy Bypass in voice-call Extension via Empty Caller ID and Suffix Matching
漏洞信息
OpenClaw versions prior to 2026.2.1 with the voice-call extension installed and enabled contain an authentication bypass vulnerability in inbound allowlist policy validation that accepts empty caller IDs and uses suffix-based matching instead of strict equality. Remote attackers can bypass inbound access controls by placing calls with missing caller IDs or numbers ending with allowlisted digits to reach the voice-call agent and execute tools.
漏洞信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
漏洞
N/A
漏洞
OpenClaw 安全漏洞
漏洞信息
OpenClaw是openclaw开源的一个智能人工助理。 OpenClaw 2026.2.1之前版本存在安全漏洞，该漏洞源于入站允许列表策略验证存在身份验证绕过，可能导致远程攻击者绕过入站访问控制。
漏洞信息
N/A
漏洞
N/A