Voice Call
Approved changes feed: RSS · Atom
cpe:2.3:a:openclaw:voice-call:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Openclaw (f30ff96c-0f84-5ff5-a7cf-8ffe11a8c46e) |
|---|---|
| Product | Voice Call (6080b95c-c2d0-5859-95ef-12aa1e2e07e6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/openclaw/openclaw |
purl2cpe | 2026-07-28 16:40:59.245258 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-32062 |
vulnerable | 2026-06-08 07:57:16.249145 |
OpenClaw 2026.2.21-2 < 2026.2.22 - Unauthenticated WebSocket Resource Exhaustion via Media Stream
HIGH (7.5)
OpenClaw versions 2026.2.21-2 up to, but not including, 2026.2.22, and @openclaw/voice-call versions 2026.2.21 up to, but not including, 2026.2.22 accept media-stream WebSocket upgrades before stream validation, allowing unauthenticated clients to establish connections. Remote attackers can hold idle pre-authenticated sockets open to consume connection resources and degrade service availability for legitimate streams.
Published: 2026-03-11T13:32:35.845Z
Updated: 2026-05-26T11:52:09.941Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28465 |
vulnerable | 2026-06-08 07:55:15.330566 |
OpenClaw voice-call < 2026.2.3 - Webhook Verification Bypass via Forwarded Headers
MEDIUM (5.9)
OpenClaw's voice-call plugin versions before 2026.2.3 contain an improper authentication vulnerability in webhook verification that allows remote attackers to bypass verification by supplying untrusted forwarded headers. Attackers can spoof webhook events by manipulating Forwarded or X-Forwarded-* headers in reverse-proxy configurations that implicitly trust these headers.
Published: 2026-03-05T21:59:41.870Z
Updated: 2026-03-11T14:58:37.790Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.