EUVD-2026-13945
GHSA-xq3g-m3j8-2vmm
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft oversized media payload
-
DeliverySend to OpenClaw channel ingestion endpoint
-
ExploitBypass byte limit enforcement
-
ExecutionTrigger excessive buffering
-
PersistExhaust memory resources
-
ImpactCause denial of service
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2025 - Insecure Design
ASVS 5.0
V2 - Validation and Business Logic Resource allocation limits
MITRE ATT&CK
1 technique across 1 tactic: Impact The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Remote unauthenticated attacker sends oversized media payloads to OpenClaw versions prior to 2026.2.22 across any channel ingestion path. No victim interaction required. Default configurations vulnerable; requires no special feature enablement. |
| Impact | The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) indicates a remotely exploitable vulnerability with low attack complexity requiring no authentication or user interaction, resulting in high availability impact. The attack is automatable and could be trivially weaponized once discovered. However, the impact is limited to availability (denial of service) with no confidentiality or integrity compromise, and no EPSS score or KEV listing suggests limited observed exploitation in the wild. From an SSVC perspective, this represents a moderate priority: while technically straightforward to exploit and affecting availability, the lack of data exfiltration or system compromise reduces urgency compared to RCE vulnerabilities. Organizations running internet-facing OpenClaw instances should prioritize patching, but this is more of a service disruption risk than a critical security breach. |
| Exploit ScenarioDerived | An unauthenticated remote attacker identifies publicly accessible OpenClaw media ingestion endpoints and crafts HTTP requests containing extremely large media payloads that exceed configured byte limits. By targeting multiple channel ingestion paths simultaneously that lack proper limit enforcement, the attacker triggers unbounded memory allocation, exhausting available RAM and causing the OpenClaw process to become unresponsive or crash, denying service to legitimate users. The low attack complexity and lack of authentication requirements make this trivially exploitable with basic HTTP tools. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 21, 2026
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consistently enforce configured inbound media byte limits across multiple channel ingestion paths. Remote unauthenticated attackers can exploit this by sending oversized media payloads to cause elevated memory consumption and process instability, leading to denial of service. The vulnerability has a CVSS score of 7.5 (High severity) with network-based attack vector and low complexity, though no active exploitation (KEV) or public proof-of-concept has been reported at this time.
RemediationAI
Upgrade OpenClaw to version 2026.2.22 or later, which contains the fix for the media byte limit enforcement issue as documented in the vendor security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-rxxp-482v-7mrh and the patch commit at https://github.com/openclaw/openclaw/commit/73d93dee64127a26f1acd09d0403b794cdeb4f5c. Until patching is feasible, implement network-level rate limiting and request size restrictions on media ingestion endpoints using a web application firewall or reverse proxy to constrain maximum upload sizes. Monitor memory consumption patterns for anomalies and configure process restart policies to maintain service availability if resource exhaustion occurs.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in npm
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
OpenClaw (cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) is affected by CWE-770 (Allocation of Resources Without Limits or Throttling), indicating a failure to properly constrain resource consumption. The vulnerability stems from inconsistent enforcement of byte limit configurations across multiple media ingestion pathways, allowing certain code paths to buffer remote media content without applying the configured constraints. This architectural flaw in input validation enables attackers to bypass intended resource allocation controls, forcing the application to consume excessive memory when processing specially crafted media payloads through vulnerable channel endpoints.
Know when Openclaw gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
OpenClaw versions prior to 2026.2.22 fail to consistently enforce configured inbound media byte limits before buffering remote media across multiple channel ingestion paths. Remote attackers can send oversized media payloads to trigger elevated memory usage and potential process instability.
Executive ViewAI
OpenClaw deployments are vulnerable to denial-of-service attacks that could render the application unavailable to users. Remote attackers can exploit inadequate media upload controls to exhaust server memory without authentication, potentially disrupting business operations until patches are applied.
Apply vendor patch. If immediate patching is not feasible, implement network-level rate limiting on media upload endpoints, configure reverse proxy or WAF to reject payloads exceeding documented media size limits, and isolate OpenClaw instances with resource quotas (memory limits, process isolation) to contain impact.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Related Vulnerabilities in OpenClaw Multiple Authorization and Command Execution
View all 20Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
Directory-context bypass in OpenClaw before 2026.8.1 allows authenticated attackers with user interaction to reuse an 'a
OpenClaw versions 2026.1.30 and below fail to validate Telegram webhook secret tokens when `channels.telegram.webhookSec
Exploit-DB