sbomify Insights

Search by CVE or GitHub advisory id, package name or title.

CVE-2026-32049 OpenClaw < 2026.2.22 - Denial of Service via Inbound Media Download Byte Limit Bypass

High 8.7 Published Updated

Remote attackers can cause denial of service by sending oversized media payloads that bypass byte limits, leading to memory exhaustion.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
Available

What is CVE-2026-32049?

CVE-2026-32049 is a high-severity denial of service vulnerability in Openclaw Openclaw, published on 21 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

OpenClaw versions prior to 2026.2.22 fail to consistently enforce configured inbound media byte limits before buffering remote media across multiple channel ingestion paths. Remote attackers can send oversized media payloads to trigger elevated memory usage and potential process instability.

Weakness: CWE-770

Which versions are affected by CVE-2026-32049?

2 open source packages ship an affected version, including openclaw. It affects 1 product.

PackageAffectedFixed in
openclaw npmAll versions2026.2.22
openclaw npmAll versions2026.2.22

Products include Openclaw Openclaw.

How do I fix CVE-2026-32049?

Upgrade openclaw to 2026.2.22 or later.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2026-32049 being exploited?

There is no known exploitation of CVE-2026-32049 in the wild and no public exploit code.

All Openclaw Openclaw vulnerabilities

Sources

Also known as GHSA-rxxp-482v-7mrh, MINI-3x4x-62p4-8885, MINI-xphv-rq32-wh8q.

Is CVE-2026-32049 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free