Количество 3
Количество 3
CVE-2026-29609
OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the fetchWithGuard function that allocates entire response payloads in memory before enforcing maxBytes limits. Remote attackers can trigger memory exhaustion by serving oversized responses without content-length headers to cause availability loss.
GHSA-j27p-hq53-9wgc
OpenClaw affected by denial of service via unbounded URL-backed media fetch
BDU:2026-06159
Уязвимость функции fetchWithGuard() ИИ-агента OpenClaw (ранее - ClawdBot или MoltBot), позволяющая нарушителю вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-29609 OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the fetchWithGuard function that allocates entire response payloads in memory before enforcing maxBytes limits. Remote attackers can trigger memory exhaustion by serving oversized responses without content-length headers to cause availability loss. | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
| GHSA-j27p-hq53-9wgc OpenClaw affected by denial of service via unbounded URL-backed media fetch | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
 | BDU:2026-06159 Уязвимость функции fetchWithGuard() ИИ-агента OpenClaw (ранее - ClawdBot или MoltBot), позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу