Beveiligingsadvies

CVE-2026-42437

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-05 11:24:55
Laatst bijgewerkt 2026-05-26 11:52:19
Toegewezen door VulnCheck
CVSS-score 8.2
Status PUBLISHED

Beschrijving

OpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voice-call realtime WebSocket path that accepts oversized frames without proper validation. Remote attackers can send oversized WebSocket frames to cause service unavailability for deployments exposing the voice-call realtime WebSocket path.