CVE-2026-41408CWE-770

OpenClaw < 2026.3.31 - Disk Exhaustion via Media Download Bypass

Low · published April 28, 2026

CVSS v4.0
2.3
EPSS
1%
Percentile
49.2
In the wild
Unconfirmed
What it is

OpenClaw before 2026.3.31 contains a resource exhaustion vulnerability in media downloads that bypasses core safety limits for file size, count, and cleanup operations. Attackers can exhaust disk space by downloading media files without triggering intended safety restrictions, causing availability impact.

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00623 · 49.2th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-04-28T18:10Z
EPSS history
Timeline
  • 28 APR 18:10Z
    OpenClaw < 2026.3.31 - Disk Exhaustion via Media Download Bypass
    cvelistv5