CVE-2026-41337
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Apr 23, 2026
Vendor
unknown
Description
OpenClaw before 2026.3.31 contains a callback origin mutation vulnerability in Plivo voice-call replay that allows attackers to mutate in-process callback origin before replay rejection. Attackers with captured valid callbacks for live calls can exploit this to manipulate callback origins during the replay process.