CVE-2026-41374
OpenClaw < 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member Authorization
概要
OpenClaw < 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member Authorization
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
OpenClaw before 2026.3.31 performs Discord audio preflight transcription before validating member authorization, allowing unauthenticated attackers to consume resources. Remote attackers can trigger audio preflight processing without member allowlist validation to cause resource exhaustion.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- patch github.com