HIGH7.5CVE-2026-32062OpenClaw voice-call media stream validated streams after upgrade, which could allow pre-start unauthenticated sockets to increase resource pressure
from 0, < 2026.2.22
MEDIUM5.9CVE-2026-28465OpenClaw optional voice-call plugin: webhook verification may be bypassed behind certain proxy configurations