OpenClaw optional voice-call plugin: webhook verification may be bypassed behind certain proxy configurations
In certain reverse-proxy / forwarding setups, webhook verification can be bypassed if untrusted forwarded headers are accepted.
Advisories for Npm/@Clawdbot/Voice-Call package
2026