CVE-2026-62210
Last modified
CVE-2026-62210 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-read attacks that exhaust gateway worker resources. Attackers with access to configured input paths can supply remote media URLs that consume gateway resources and reduce availability.. EPSS estimates a 0.31% chance of exploitation in the next 30 days.
Description
OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigger slow-read attacks that exhaust gateway worker resources. Attackers with access to configured input paths can supply remote media URLs that consume gateway resources and reduce availability.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Openclaw | Openclaw | < 2026.6.1 |
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-4xwj-mcc7-x7x5Mitigation, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-62210?
How severe is CVE-2026-62210?
How do I fix CVE-2026-62210?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-62205OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a…7.1
- CVE-2026-62206OpenClaw versions before 2026.6.9 contain a missing authoriz…7.1
- CVE-2026-62207OpenClaw versions before 2026.6.5 contain an authentication …8.8
- CVE-2026-62208OpenClaw before 2026.6.5 could forward Authorization headers…6.5
- CVE-2026-62209OpenClaw versions 2026.5.10-beta.1 before 2026.6.5 contain a…8.1
- CVE-2026-6221Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-62211OpenClaw versions before 2026.6.1 contain a credential redac…5
- CVE-2026-62212OpenClaw before 2026.5.28 contains a race condition in the M…7.1
- CVE-2026-62213OpenClaw versions before 2026.5.27 contain a token leakage v…6.5
- CVE-2026-62214OpenClaw versions before 2026.5.28 Bot Framework contains an…6.5
- CVE-2026-62215OpenClaw versions before 2026.6.5 contain an authentication …8
- CVE-2026-62216OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass …5
Are you affected by CVE-2026-62210?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST