Security Advisory

CVE-2026-41334

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-23 21:57:54

Last updated 2026-04-24 16:41:10

Assigner VulnCheck

CVSS score 7.1

State PUBLISHED

Description

OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce pixel-limit guards on sips. Attackers can exploit this by uploading oversized images to cause denial of service through excessive memory consumption.

← Browse all CVEs View on cve.org ↗