What is the CVSS score of CVE-2026-32044?

CVE-2026-32044 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-32044?

CVE-2026-32044 presents moderate security risk rated CVSS 5.5. Exploitation could compromise the security of affected deployments. Proof-of-concept code is publicly available.. A patch is available.

Is there a public PoC exploit available for CVE-2026-32044?

Yes, a public proof-of-concept exploit is available for CVE-2026-32044. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-32044?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Openclaw CVE-2026-32044

EUVD-2026-13937 MEDIUM

Improper Handling of Highly Compressed Data (Data Amplification) (CWE-409)

2026-03-21 VulnCheck

GHSA-r44j-6vwc-m7hx

Denial Of Service Openclaw

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

PoC Detected

Mar 23, 2026 - 17:10 vuln.today

Public exploit code

EUVD ID Assigned

Mar 21, 2026 - 01:00 euvd

EUVD-2026-13937

Analysis Generated

Mar 21, 2026 - 01:00 vuln.today

Patch released

Mar 21, 2026 - 01:00 nvd

Patch available

CVE Published

Mar 21, 2026 - 00:42 nvd

MEDIUM 5.5

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

4 npm packages depend on openclaw (4 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.2.

DescriptionCVE.org

OpenClaw versions prior to 2026.3.2 contain an archive extraction vulnerability in the tar.bz2 installer path that bypasses safety checks enforced on other archive formats. Attackers can craft malicious tar.bz2 skill archives to bypass special-entry blocking and extracted-size guardrails, causing local denial of service during skill installation.

AnalysisAI

OpenClaw versions prior to 2026.3.2 contain an archive extraction vulnerability that selectively bypasses safety checks for tar.bz2 skill archives while other formats enforce proper validation. An attacker can craft a malicious tar.bz2 skill archive that circumvents special-entry blocking and extracted-size guardrails, causing local denial of service during skill installation when a user interacts with the installer. This is a local, user-interaction-dependent vulnerability with no authentication required, rated CVSS 5.5 (medium severity) with denial of service impact.

Technical ContextAI

The vulnerability exists in OpenClaw's skill installation mechanism, which processes multiple archive formats for deployment. The root cause, classified under CWE-409 (Improper Handling of Highly Compressed Data), stems from inconsistent validation logic across archive format handlers. While zip and other formats implement safety checks to prevent extraction bombs and path traversal via special entries (symlinks, hardlinks, absolute paths), the tar.bz2 extraction path lacks equivalent safeguards. When tar.bz2 archives are processed, the compression layer (bzip2) decompresses without enforcing size limits or validating archive entries before extraction, allowing attackers to craft archives with nested or oversized payloads that exhaust disk space or CPU resources. The affected product, identified via CPE (cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*), is the OpenClaw skill management framework used for plugin/skill deployment.

RemediationAI

Upgrade OpenClaw to version 2026.3.2 or later immediately. The vendor has released a patch available via the GitHub repository commit 0dbb92dd2bcf9a32379d11c0f11ed016669dae3e (https://github.com/openclaw/openclaw/commit/0dbb92dd2bcf9a32379d11c0f11ed016669dae3e), which implements proper validation and size enforcement for tar.bz2 archives consistent with other archive formats. Until patching is possible, implement procedural controls: restrict skill installation to trusted, pre-vetted packages only; educate users not to install skills from untrusted sources; and monitor disk space consumption during skill installation to detect anomalous extraction behavior. If OpenClaw is deployed in a containerized or sandbox environment, the impact of a denial-of-service attack is automatically contained to that isolated instance.