Medium
OpenClaw before 2026.8.1 SMS Webhook Rate Limit Bypass
Type: advisorySource: Official CVE List
OpenClaw (npm package 'openclaw') versions >= 2026.6.6 and < 2026.8.1 apply the SMS webhook invalid-request rate limit before Twilio signature verification and identify clients only by the raw proxy socket address. In…
Products: OpenClawCVEs: CVE-2026-100571