Is there a patch available for CVE-2026-41408?

Yes, a patch is available for CVE-2026-41408. Update the affected software to the latest version immediately.

OpenClaw CVE-2026-41408

Q: What is the CVSS score of CVE-2026-41408?

CVE-2026-41408 has a CVSS 4.0 base score of 2.3 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-26115 LOW

Allocation of Resources Without Limits or Throttling (CWE-770)

2026-04-28 VulnCheck

Denial Of Service Openclaw

2.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.3 LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

4.3 MEDIUM

Network-delivered via authenticated Tlon posts (PR:L); no complexity barrier once account exists; impact is disk availability only on the local system.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

4.0 AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Source Code Evidence Fetched

Jul 24, 2026 - 04:22 vuln.today

Analysis Generated

Jul 24, 2026 - 04:22 vuln.today

Severity Changed

Apr 28, 2026 - 19:52 NVD

MEDIUM LOW

CVSS changed

Apr 28, 2026 - 19:52 NVD

4.3 (MEDIUM) 2.3 (LOW)

EUVD ID Assigned

Apr 28, 2026 - 19:30 euvd

EUVD-2026-26115

Patch released

Apr 28, 2026 - 19:30 nvd

Patch available

CVE Published

Apr 28, 2026 - 18:10 nvd

LOW 2.3

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 npm packages depend on openclaw (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.31.

DescriptionCVE.org

OpenClaw before 2026.3.31 contains a resource exhaustion vulnerability in media downloads that bypasses core safety limits for file size, count, and cleanup operations. Attackers can exhaust disk space by downloading media files without triggering intended safety restrictions, causing availability impact.

AnalysisAI

Disk exhaustion via unbounded Tlon media downloads affects OpenClaw versions up to and including 2026.3.28, where the Tlon extension bypasses the shared media runtime's file size cap (6 MB per file), per-message image count limit (8 images), and cleanup controls. An authenticated attacker with a valid Tlon account can craft posts containing large numbers of oversized image URLs, causing the OpenClaw instance to write unbounded media to local storage until disk space is exhausted. No active exploitation is confirmed (not in CISA KEV), EPSS is 0.04% (11th percentile), and SSVC classifies exploitation as none - vendor-released patch version 2026.3.31 resolves the issue.

Technical ContextAI

OpenClaw is an npm-distributed AI assistant application (CPE: cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) that includes a bundled Tlon extension for interacting with the Tlon decentralized social network. The vulnerable path lies in extensions/tlon/src/monitor/media.ts, which prior to the fix performed direct filesystem writes using Node.js stream primitives (createWriteStream, pipeline) without routing downloads through the shared openclaw/plugin-sdk/media-runtime module that enforces resource limits. This is a textbook instance of CWE-770 (Allocation of Resources Without Limits or Throttling): the code allocated disk resources during media ingestion without enforcing any cap on file size, count of files per message, or post-download cleanup, allowing resource consumption to grow without bound in response to attacker-controlled input.

RemediationAI

Upgrade OpenClaw to version 2026.3.31 or later via npm (npm install openclaw@2026.3.31), which is the vendor-confirmed patched release. The fix, landed in commit 2194587d70d2aef863508b945319c5a7c88b12ce, routes all Tlon inbound image downloads through the shared openclaw/plugin-sdk/media-runtime, enforcing a 6 MB per-file size cap and stopping after 8 images per message. If immediate upgrade is not possible, disabling or removing the Tlon extension entirely eliminates the vulnerable code path with no side effects beyond loss of Tlon integration functionality. No additional network-layer mitigations are necessary given the authentication prerequisite and limited blast radius. Full advisory and patch references: https://github.com/openclaw/openclaw/security/advisories/GHSA-4g5x-2jfc-xm98 and https://github.com/openclaw/openclaw/commit/2194587d70d2aef863508b945319c5a7c88b12ce.