Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.3.31 contains a resource exhaustion vulnerability in media downloads that bypasses core safety limits for file size, count, and cleanup operations. Attackers can exhaust disk space by downloading media files without triggering intended safety restrictions, causing availability impact.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-28 | 1 | General1 |
| 2026-04-29 | 1 | Disclosure1 |
CVE-2026-41408 Resource Exhaustion Vulnerability in OpenClaw Media Downloads Before 2026.3.31 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41408
Post summary
The entry announces a resource exhaustion vulnerability (CVE-2026-41408) affecting OpenClaw Media Downloads versions prior to 2026.3.31, providing only basic details without evidence of exploitation, PoC, or patching information.
CVE-2026-41408 OpenClaw before 2026.3.31 contains a resource exhaustion vulnerability in media downloads that bypasses core safety limits for file size, count, and cleanup operation… https://www.cve.org/CVERecord?id=CVE-2026-41408
Post summary
CVE‑2026‑41408 exposes a resource exhaustion flaw in OpenClaw’s media download handling; no PoC, exploit, active use, or patch details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |