CVE-2026-62210

MEDIUM 6.5

OpenClaw < 2026.6.1 Denial of Service via Remote Media URLs

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

0th

OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-read attacks that exhaust gateway worker resources. Attackers with access to configured input paths can supply remote media URLs that consume gateway resources and reduce availability.

CWE	CWE-770
Vendor	openclaw
Product	openclaw
Published	Jul 17, 2026

Stay Ahead of the Next One

Get instant alerts for openclaw openclaw

Be the first to know when new medium vulnerabilities affecting openclaw openclaw are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

OpenClaw / OpenClaw

0 < 2026.6.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5 vulncheck.com: https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-remote-media-urls

Credits

🔍 ttzero (@ttzero25)