CVE-2026-32062
OpenClaw versions2026.2.21-2 prior to 2026.2.22 and @openclaw/voice-call versions 2026.2.21 prior to 2026.2.22 accept media-stream WebSocket upgrades before stream validation, allowing unauthenticated clients to establish connections. Remote attackers can hold idle pre-authenticated sockets open to consume connection resources and degrade service availability for legitimate streams.
Vendor
Product
CWE
Yayın Tarihi
2026-03-11 14:16:28
Güncelleme
2026-03-26 12:48:57
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-