CVE-2026-32053

MEDIUM6.9

OpenClaw < 2026.2.23 - Twilio Webhook Replay Bypass via Randomized Event ID Normalization

Published Mar 21, 2026

Modified 1 months ago

Details

OpenClaw versions prior to 2026.2.23 contain a vulnerability in Twilio webhook event deduplication where normalized event IDs are randomized per parse, allowing replay events to bypass manager dedupe checks. Attackers can replay Twilio webhook events to trigger duplicate or stale call-state transitions, potentially causing incorrect call handling and state corruption.

References

FIX

https://github.com/openclaw/openclaw/commit/1d28da55a5d0ff409e34999e0961157e9db0a2ab

ADVISORY

https://github.com/openclaw/openclaw/security/advisories/GHSA-vqx8-9xxw-f2m7

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-32053

ADVISORY

https://www.vulncheck.com/advisories/openclaw-twilio-webhook-replay-bypass-via-randomized-event-id-normalization

CVSS Analysis

CVSS v4.0

6.9