CVE-2026-41331 in OpenClawinformation

Résumé

par MITRE • 21/04/2026

OpenClaw before 2026.3.31 contains a resource consumption vulnerability in Telegram audio preflight transcription that allows unauthorized group senders to trigger transcription processing. Attackers can exploit insufficient allowlist enforcement to cause resource or billing consumption by initiating audio preflight operations before authorization checks are applied.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

VulnCheck

Réserver

20/04/2026

Divulgation

21/04/2026

Modérer

accepté

Entrée

VDB-358413

CPE

prêt

EPSS

0.00056

KEV

non

Activités

très faible

Secteur

Education, Government, ...

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-41331
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41331
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-41331/

◂ PrécédentAperçuSuivant ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!