GHSA-3m3q-x3gj-f79x

Source

https://github.com/advisories/GHSA-3m3q-x3gj-f79x

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-3m3q-x3gj-f79x/GHSA-3m3q-x3gj-f79x.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-3m3q-x3gj-f79x

Aliases

CVE-2026-28465

Published

2026-02-17T21:31:58Z

Modified

2026-03-09T21:01:22Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
8.2 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

OpenClaw optional voice-call plugin: webhook verification may be bypassed behind certain proxy configurations

Details

Affected Packages / Versions

This issue affects the optional voice-call plugin only. It is not enabled by default; it only applies to installations where the plugin is installed and enabled.

Package: @openclaw/voice-call
Vulnerable versions: < 2026.2.3
Patched versions: >= 2026.2.3

Legacy package name (if you are still using it):

Package: @clawdbot/voice-call
Vulnerable versions: <= 2026.1.24
Patched versions: none published under this package name; migrate to @openclaw/voice-call

Summary

In certain reverse-proxy / forwarding setups, webhook verification can be bypassed if untrusted forwarded headers are accepted.

Impact

An external party may be able to send voice-call webhook requests that are accepted as valid, which can result in spoofed webhook events being processed.

Root Cause

Some deployments implicitly trusted forwarded headers (for example Forwarded / X-Forwarded-*) when determining request properties used during webhook verification. If those headers are not overwritten by a trusted proxy, a client can supply them directly and influence verification.

Resolution

Ignore forwarded headers by default unless explicitly trusted and allowlisted in configuration. Keep any loopback-only development bypass restricted to local development only. Upgrade to a patched version.

If you cannot upgrade immediately, strip Forwarded and X-Forwarded-* headers at the edge so clients cannot supply them directly.

Fix Commit(s)

a749db9820eb6d6224032a5a34223d286d2dcc2f

Credits

Thanks @0x5t for reporting.

Database specific

{
    "cwe_ids":  [
        "CWE-287",
        "CWE-290",
        "CWE-345"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-02-17T21:31:58Z",
    "nvd_published_at":  "2026-03-05T22:16:19Z",
    "severity":  "HIGH"
}

References

Affected packages

npm / @openclaw/voice-call

Package

Name: @openclaw/voice-call; View open source insights on deps.dev
Purl: pkg:npm/%40openclaw/voice-call

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2026.2.3

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-3m3q-x3gj-f79x/GHSA-3m3q-x3gj-f79x.json"

npm / @clawdbot/voice-call

Package

Name: @clawdbot/voice-call; View open source insights on deps.dev
Purl: pkg:npm/%40clawdbot/voice-call

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

2026.1.24

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-3m3q-x3gj-f79x/GHSA-3m3q-x3gj-f79x.json"