CVE-2026-32053CWE-294

OpenClaw < 2026.2.23 - Twilio Webhook Replay Bypass via Randomized Event ID Normalization

Medium · published March 21, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
41.3
In the wild
Unconfirmed
What it is

OpenClaw versions prior to 2026.2.23 contain a vulnerability in Twilio webhook event deduplication where normalized event IDs are randomized per parse, allowing replay events to bypass manager dedupe checks. Attackers can replay Twilio webhook events to trigger duplicate or stale call-state transitions, potentially causing incorrect call handling and state corruption.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00491 · 41.3th percentile
Weakness
CWE-294 · Authentication Bypass by Capture-replay
Published
2026-03-21T00:42Z
EPSS history
Timeline
  • 21 MAR 00:42Z
    OpenClaw < 2026.2.23 - Twilio Webhook Replay Bypass via Randomized Event ID Normalization
    cvelistv5