CVE-2026-32049
OpenClaw < 2026.2.22 - Denial of Service via Inbound Media Download Byte Limit Bypass
概要
OpenClaw < 2026.2.22 - Denial of Service via Inbound Media Download Byte Limit Bypass
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
OpenClaw versions prior to 2026.2.22 fail to consistently enforce configured inbound media byte limits before buffering remote media across multiple channel ingestion paths. Remote attackers can send oversized media payloads to trigger elevated memory usage and potential process instability.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- patch github.com