Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.3.22 contains an unauthenticated resource exhaustion vulnerability in voice call webhook handling that buffers request bodies before provider signature checks. Attackers can send large or malicious webhook requests to exhaust server resources without authentication by bypassing signature validation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-35626 OpenClaw before 2026.3.22 contains an unauthenticated resource exhaustion vulnerability in voice call webhook handling that buffers request bodies before provider sig… https://www.cve.org/CVERecord?id=CVE-2026-35626
Post summary
The post discloses CVE-2026-35626, an unauthenticated resource‑exhaustion flaw in OpenClaw's webhook handling prior to version 2026.3.22, with no mention of exploitation, patches, or PoC.
🚨*CVE* CVE-2026-35626 OpenClaw before 2026.3.22 contains an unauthenticated resource exhaustion vulnerability in voice call webhook handling that buffers request bodies before provider sig… https://www.cve.org/CVERecord?id=CVE-2026-35626 ----- Traducción: CVE-2026-35626 Ope… http://infoflow.cloud`
Post summary
The text announces the CVE-2026-35626 vulnerability in OpenClaw, describing a resource exhaustion flaw in voice call webhook handling.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |