Vulnerabilities (CVE)

Filtered by vendor Openclaw Subscribe
Filtered by product Openclaw\/voice-call
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-32062 1 Openclaw 2 Openclaw, Openclaw\/voice-call 2026-03-26 N/A 7.5 HIGH
OpenClaw versions2026.2.21-2 prior to 2026.2.22 and @openclaw/voice-call versions 2026.2.21 prior to 2026.2.22 accept media-stream WebSocket upgrades before stream validation, allowing unauthenticated clients to establish connections. Remote attackers can hold idle pre-authenticated sockets open to consume connection resources and degrade service availability for legitimate streams.