CVE-2026-41408: OpenClaw < 2026.3.31 - Disk Exhaustion via Media Download Bypass

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-04-28 · updated 2026-06-17
Weakness: CWE-770

Description

OpenClaw before 2026.3.31 contains a resource exhaustion vulnerability in media downloads that bypasses core safety limits for file size, count, and cleanup operations. Attackers can exhaust disk space by downloading media files without triggering intended safety restrictions, causing availability impact.

Affected products

OpenClaw: before 2026.3.31 — fixed in 2026.3.31

How to fix

Upgrade to a fixed version: OpenClaw 2026.3.31. Check the vendor advisory for mitigations.

References

https://github.com/openclaw/openclaw/commit/2194587d70d2aef863508b945319c5a7c88b12ce
https://github.com/openclaw/openclaw/security/advisories/GHSA-4g5x-2jfc-xm98
https://www.vulncheck.com/advisories/openclaw-disk-exhaustion-via-media-download-bypass

Get alerted when CVE-2026-41408 or the next vulnerability affects your stack