Beveiligingsadvies

CVE-2026-41400

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-28 18:09:58
Laatst bijgewerkt 2026-04-30 12:52:37
Toegewezen door VulnCheck
CVSS-score 6.9
Status PUBLISHED

Beschrijving

OpenClaw before 2026.3.31 contains an incomplete fix for CVE-2026-32062 where the voice-call component parses large WebSocket frames before start validation. Remote attackers can send oversized pre-start WebSocket frames to cause resource consumption and denial of service.