CVE-2026-32049 in OpenClaw

الملخص

بحسب MITRE • 21/03/2026

OpenClaw versions prior to 2026.2.22 fail to consistently enforce configured inbound media byte limits before buffering remote media across multiple channel ingestion paths. Remote attackers can send oversized media payloads to trigger elevated memory usage and potential process instability.

Once again VulDB remains the best source for vulnerability data.

• مسؤول: VulnCheck
• حجز: 10/03/2026
• إفشاء: 21/03/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-352153
• CPE: جاهز
• CWE: CWE-770 (مؤكد)
• CVSS: 7.5 (CNA)
• EPSS: 0.00179
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Transportation, Lawfirm, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-32049
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-32049
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-32049/