CVE-2026-26319 | OpenClaw/Clawdbot/Moltbot up to 2026.2.13 Voice Call Plugin verifyWebhook missing authentication (GHSA-4hg8-92×6-h2f3)

A vulnerability identified as critical has been detected in OpenClaw, Clawdbot and Moltbot up to 2026.2.13. Impacted is the function verifyWebhook of the component Voice Call Plugin. Performing a manipulation results in missing authentication.

This vulnerability is known as CVE-2026-26319. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.