Read the docs

OpenClaw

Records679All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical29CVSS 9.0–10.0
CVSS high291CVSS 7.0–8.9

Exploited now

OpenClaw records in CISA KEV

No OpenClaw vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openclaw 575 records HIGH Openclaw/feishu 2 records LOW Openclaw/voice-call 1 record MEDIUM

Records

1 record in Openclaw/voice-call · all components

TI-2026-24602 CVE-2026-32062 · GHSA-mfg5-7q5g-f37j

OpenClaw 2026.2.21-2 < 2026.2.22 - Unauthenticated WebSocket Resource Exhaustion via Media Stream

Priority MEDIUM 44

OpenClaw versions 2026.2.21-2 up to, but not including, 2026.2.22, and @openclaw/voice-call versions 2026.2.21 up to, but not including, 2026.2.22 accept media-stream WebSocket upgrades before stream validation, allowing…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00479 Published 2026-03-11 Fixed in 2026.2.22 CWE-770
Open these records in search →