Denial of Service Vulnerability in OpenClaw by OpenClaw
CVE-2026-62210

6MEDIUM

Key Information:

Vendor

Openclaw

Status
Openclaw
Vendor
CVE Published:
17 July 2026

What is CVE-2026-62210?

Certain versions of OpenClaw prior to 2026.6.1 are susceptible to a denial of service vulnerability. This issue arises when remote media URLs are used to execute slow-read attacks that can consume gateway worker resources. Malicious actors who have access to configured input paths can exploit this flaw by providing crafted remote media URLs, leading to significant resource depletion and a reduction in service availability.

Affected Version(s)

OpenClaw 0 < 2026.6.1

OpenClaw 2026.6.1

References

https://github.com/openclaw/openclaw/security/advisories/...
vendor-advisory
https://www.vulncheck.com/advisories/openclaw-denial-of-s...
third-party-advisory

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ttzero (@ttzero25)
.