Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vfpw-6fgp-w7h6

Опубликовано: 17 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.3
CVSS3: 5.3

Описание

OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser rate limits on WebSocket authentication attempts. When the affected feature is enabled and reachable by lower-trust input, this can consume gateway resources and reduce service availability.

OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser rate limits on WebSocket authentication attempts. When the affected feature is enabled and reachable by lower-trust input, this can consume gateway resources and reduce service availability.

EPSS

Процентиль: 22%
0.00293
Низкий

6.3 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-307

Связанные уязвимости

CVSS3: 5.3
nvd
29 дней назад

OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser rate limits on WebSocket authentication attempts. When the affected feature is enabled and reachable by lower-trust input, this can consume gateway resources and reduce service availability.

EPSS

Процентиль: 22%
0.00293
Низкий

6.3 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-307