Vulnerabilities (CVE)

Filtered by vendor Openclaw Subscribe
Filtered by product Openclaw\/voice-call
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-32062 1 Openclaw 2 Openclaw, Openclaw\/voice-call 2026-05-26 N/A 7.5 HIGH
OpenClaw versions 2026.2.21-2 up to, but not including, 2026.2.22, and @openclaw/voice-call versions 2026.2.21 up to, but not including, 2026.2.22 accept media-stream WebSocket upgrades before stream validation, allowing unauthenticated clients to establish connections. Remote attackers can hold idle pre-authenticated sockets open to consume connection resources and degrade service availability for legitimate streams.