CVE-2026-62210CWE-770

OpenClaw < 2026.6.1 Denial of Service via Remote Media URLs

Medium · published July 17, 2026

CVSS v4.0
6.0
EPSS
0%
Percentile
38.2
In the wild
Unconfirmed
What it is

OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-read attacks that exhaust gateway worker resources. Attackers with access to configured input paths can supply remote media URLs that consume gateway resources and reduce availability.

The record
Technical detail
CVSS v4.0
6.0 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00450 · 38.2th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-07-17T00:06Z
EPSS history
Timeline
  • 17 JUL 00:06Z
    OpenClaw < 2026.6.1 Denial of Service via Remote Media URLs
    cvelistv5