Security Advisory

CVE-2026-41337

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-23 21:57:57
Last updated 2026-04-24 14:28:46
Assigner VulnCheck
CVSS score 6.3
State PUBLISHED

Description

OpenClaw before 2026.3.31 contains a callback origin mutation vulnerability in Plivo voice-call replay that allows attackers to mutate in-process callback origin before replay rejection. Attackers with captured valid callbacks for live calls can exploit this to manipulate callback origins during the replay process.