Ghostwire

CVE-2026-41351: OpenClaw before 2026.3.31 contains a replay detection bypass vulnerability in webhook signature handling that treats...

MEDIUM CVSS 5.5

Published: April 23, 2026 | Last Modified: April 23, 2026

Description

OpenClaw before 2026.3.31 contains a replay detection bypass vulnerability in webhook signature handling that treats Base64 and Base64URL encoded signatures as distinct requests. Attackers can re-encode Telnyx webhook signatures to bypass replay detection while maintaining valid signature verification.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (2 articles)

References