Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-41400

OpenClaw < 2026.3.31 - Resource Consumption via Oversized WebSocket Frames in voice-call

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

OpenClaw before 2026.3.31 contains an incomplete fix for CVE-2026-32062 where the voice-call component parses large WebSocket frames before start validation. Remote attackers can send oversized pre-start WebSocket frames to cause resource consumption and denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenClaw OpenClaw

Default version status: unaffected

  • 0 to < 2026.3.31affected
  • 2026.3.31unaffected
pkg:npm/openclaw

References