Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: OpenClaw Component: Openclaw/voice-call Clear all filters
TI-2026-24602 CVE-2026-32062 · GHSA-mfg5-7q5g-f37j

OpenClaw 2026.2.21-2 < 2026.2.22 - Unauthenticated WebSocket Resource Exhaustion via Media Stream

Priority MEDIUM 44

OpenClaw versions 2026.2.21-2 up to, but not including, 2026.2.22, and @openclaw/voice-call versions 2026.2.21 up to, but not including, 2026.2.22 accept media-stream WebSocket upgrades before stream validation, allowing…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00479 Published 2026-03-11 Fixed in 2026.2.22 CWE-770