Callback Origin Mutation Vulnerability in OpenClaw by OpenClaw

CVE-2026-41337

What is CVE-2026-41337?

OpenClaw prior to version 2026.3.31 is susceptible to a callback origin mutation vulnerability. This flaw enables attackers to exploit valid callbacks from live calls to manipulate callback origins during the replay process of Plivo voice calls. By capturing these callbacks, attackers can alter the expected origins, potentially leading to unauthorized actions and security breaches during call replays.

References