Skip to content
Threat Feed

Product

Openclaw < 2026.4.10

1 brief RSS
medium advisory

OpenClaw Denial-of-Service via Oversized WebSocket Frames

OpenClaw versions prior to 2026.4.10 are vulnerable to a denial-of-service attack where remote attackers can send oversized WebSocket frames to the voice-call realtime path, causing service unavailability.

openclaw < 2026.4.10 denial-of-service websocket cve-2026-42437
2r 1t 1c