CVE-2026-32011
OpenClaw versions prior to 2026.3.2 contain a denial of service vulnerability in webhook handlers for BlueBubbles and Google Chat that parse request bodies before performing authentication and signature validation. Unauthenticated attackers can exploit this by sending slow or oversized request bodies to exhaust parser resources and degrade service availability.
Vendor
Product
CWE
Yayın Tarihi
2026-03-19 22:16:34
Güncelleme
2026-03-23 18:29:20
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-