EUVD-2026-45098
GHSA-vq5x-r5hj-w7qc
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable via media URL submission but requires input-path access (PR:L); availability-only impact with no confidentiality or integrity effects.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-read attacks that exhaust gateway worker resources. Attackers with access to configured input paths can supply remote media URLs that consume gateway resources and reduce availability.
AnalysisAI
Denial of service in OpenClaw gateway via slow-read attacks against remote media URL processing affects all versions before 2026.6.1. Attackers with access to configured input paths can supply crafted remote media URLs that hold gateway worker connections open indefinitely, gradually exhausting the worker pool and degrading availability for legitimate requests. No active exploitation has been confirmed (not listed in CISA KEV) and no public POC has been identified at time of analysis, but the network-reachable vector and high availability impact make this a meaningful operational risk for exposed deployments.
Technical ContextAI
OpenClaw (CPE: cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) is a media processing gateway that fetches and processes remote media content by URL. The root cause is CWE-770 (Allocation of Resources Without Limits or Throttling): the gateway does not enforce read timeouts or per-connection resource caps when retrieving remote media. A slow-read attack exploits this by having the attacker-controlled server respond to the gateway's HTTP request at an artificially low byte rate, keeping the gateway worker thread occupied for the full duration of the artificially extended transfer. Because no ceiling is placed on the number of such concurrent blocked workers, repeated slow-read requests drain the entire worker pool, a well-understood resource exhaustion technique at the application layer.
RemediationAI
Upgrade to OpenClaw version 2026.6.1 or later, which resolves the resource exhaustion condition. Refer to the vendor advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5 for release and upgrade instructions. If immediate patching is not feasible, restrict access to configured input paths to the smallest possible set of trusted users or automated systems, reducing the attacker population that can trigger the condition. Additionally, deploying a reverse proxy or API gateway in front of OpenClaw with enforced upstream connection timeouts and concurrent request limits per client can limit the blast radius of slow-read attempts without requiring an application change, though this does not eliminate the vulnerability and adds latency overhead to legitimate large-media requests.
Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
OpenClaw sandbox browser functionality launches x11vnc for noVNC observer sessions without requiring authentication, all
OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
OpenClaw versions prior to 2026.3.1 contain a sandbox escape vulnerability that allows authenticated attackers with low
OpenClaw versions 2026.1.30 and below fail to validate Telegram webhook secret tokens when `channels.telegram.webhookSec
Same technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today