Tag

Replay-Attack

2 briefs RSS

OpenClaw Webhook Replay Vulnerability (CVE-2026-41395)

OpenClaw before 2026.3.28 is vulnerable to webhook replay attacks due to improper signature verification, allowing attackers to reorder query parameters and trigger duplicate voice-call processing.

OpenClaw webhook replay-attack plivo

2r 1t 1c 5d ago

critical advisory

OpenClaw Bootstrap Code Replay Vulnerability (CVE-2026-32987)

2 rules 2 TTPs 1 IOC

OpenClaw before 2026.3.13 is vulnerable to a replay attack during device pairing verification, allowing attackers to repeatedly verify a bootstrap code and escalate privileges to operator.admin.

replay-attack privilege-escalation device-pairing

2r 2t 1i Mar 29, 2026