VulnSocial

CVE-2026-42437Disclosure

LOWCVSS 8.2 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voice-call realtime WebSocket path that accepts oversized frames without proper validation. Remote attackers can send oversized WebSocket frames to cause service unavailability for deployments exposing the voice-call realtime WebSocket path.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-05-05: 2Patch / Workaround · 2026-05-05: 1Technical Details · 2026-05-05: 205-05
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-42437 OpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voice-call realtime WebSocket path that accepts oversized frames without … https://www.cve.org/CVERecord?id=CVE-2026-42437 ----- Traducción: CVE-2026-42437 Ope… http://infoflow.cloud`

    Post summary

    CVE-2026-42437 is a denial‑of‑service flaw in OpenClaw versions <2026.4.10 where the voice‑call WebSocket accepts oversized frames, potentially causing a crash.

    0000039
    75 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-42437 OpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voice-call realtime WebSocket path that accepts oversized frames without … https://www.cve.org/CVERecord?id=CVE-2026-42437

    Post summary

    The snippet discloses a DoS vulnerability in OpenClaw’s WebSocket handling, notes that versions prior to 2026.4.10 are affected, and indicates that upgrading to 2026.4.10 provides a patch.

    00000155
    57.4K followersView on X

Explore more

Back to dashboard