Description
OpenClaw versions prior to 2026.2.23 contain a vulnerability in Twilio webhook event deduplication where normalized event IDs are randomized per parse, allowing replay events to bypass manager dedupe checks. Attackers can replay Twilio webhook events to trigger duplicate or stale call-state transitions, potentially causing incorrect call handling and state corruption.
Published: 2026-03-21
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Replay of Twilio webhook events bypasses deduplication, causing duplicate or stale call state transitions that can corrupt call handling.
Action: Apply patch
AI Analysis

Impact

The vulnerability is in the Twilio webhook event deduplication logic of OpenClaw. Normalized event IDs are randomized for each parse, allowing attackers to replay webhook events that normally would be blocked by a deduplication manager. This can lead to duplicate or stale call-state transitions, potentially causing incorrect call handling and state corruption.

Affected Systems

OpenClaw OpenClaw versions earlier than 2026.2.23, which run on a Node.js environment as indicated by the CPE string. Systems using any of these versions are affected and must be identified.

Risk and Exploitability

The CVSS score of 6.9 indicates a medium severity vulnerability. No EPSS score is provided and it is not listed in the CISA KEV catalog, implying no confirmed widespread exploitation at this time. Attackers likely need remote network access to the Twilio webhook endpoint and can send repeated events to trigger the deduplication bypass, making the exploitation straightforward for anyone with legitimate Twilio integration credentials.

Generated by OpenCVE AI on March 21, 2026 at 06:56 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade OpenClaw to version 2026.2.23 or later.
  • Verify the Twilio webhook endpoint configuration after the upgrade to ensure event deduplication is functioning correctly.
  • If immediate upgrade is not feasible, implement application‑level duplicate event detection or rate limiting on the webhook handler to reduce the impact of replayed events.

Generated by OpenCVE AI on March 21, 2026 at 06:56 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-vqx8-9xxw-f2m7 OpenClaw's voice-call Twilio webhook replay could bypass manager dedupe because normalized event IDs were randomized per parse
History

Mon, 23 Mar 2026 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 21 Mar 2026 05:30:00 +0000

Type Values Removed Values Added
Description OpenClaw versions prior to 2026.2.23 contain a vulnerability in Twilio webhook event deduplication where normalized event IDs are randomized per parse, allowing replay events to bypass manager dedupe checks. Attackers can replay Twilio webhook events to trigger duplicate or stale call-state transitions, potentially causing incorrect call handling and state corruption.
Title OpenClaw < 2026.2.23 - Twilio Webhook Replay Bypass via Randomized Event ID Normalization
First Time appeared Openclaw
Openclaw openclaw
Weaknesses CWE-294
CPEs cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*
Vendors & Products Openclaw
Openclaw openclaw
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N'}

Subscriptions

Openclaw Openclaw
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-03-23T17:29:39.806Z

Reserved: 2026-03-10T19:48:47.515Z

Link: CVE-2026-32053

cve-icon Vulnrichment

Updated: 2026-03-23T17:29:36.199Z

cve-icon NVD

Status : Analyzed

Published: 2026-03-21T01:17:08.503

Modified: 2026-03-24T21:15:38.733

Link: CVE-2026-32053

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-03-25T14:44:16Z

Weaknesses