Resource Consumption Vulnerability in OpenClaw Telegram Audio Processing

CVE-2026-41331

What is CVE-2026-41331?

OpenClaw prior to version 2026.3.31 is prone to a resource consumption vulnerability stemming from its handling of unauthorized Telegram audio preflight transcriptions. Attackers can exploit this flaw by initiating audio processing tasks, leading to increased resource usage and potential billing implications due to insufficient enforcement of allowlist requirements. This vulnerability emphasizes the need for stringent preauthorization protocols to mitigate unauthorized access risks.

References