CVE-2026-32062 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OpenClaw versions2026.2.21-2 prior to 2026.2.22 and @openclaw/voice-call versions 2026.2.21 prior to 2026.2.22 accept media-stream WebSocket upgrades before str…
High CVSS: 8.7

CVE-2026-32062

OpenClaw versions2026.2.21-2 prior to 2026.2.22 and @openclaw/voice-call versions 2026.2.21 prior to 2026.2.22 accept media-stream WebSocket upgrades before stream validation, allowing unauthenticated clients to establish connections. Remote attackers can hold idle pre-authenticated sockets open to consume connection resources and degrade service availability for legitimate streams.
Vendor
Openclaw
Product
Openclaw
CWE
CWE-770
Yayın Tarihi
2026-03-11 14:16:28
Güncelleme
2026-03-26 12:48:57
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

Referanslar