CVE-2026-94094

A flaw has been found in OpenClaw up to 2026.9.5. Affected is the function createCanvasHostHandler of the file extensions/canvas/src/host/server.ts of the component Canvas Host Route. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been published and may be used. Fix suggestion's "streaming/size-limit" was never shipped - latest 2026.9.5 still buffers the whole file via readFile() (src/canvas/serve.runtime.ts:17,114), unlike the sibling WS path which caps at 64KB. The vendor was contacted early about this disclosure.

• CWE-404

• https://github.com/lche511/cve/tree/main/OpenClaw_Canvas_Big_GET_DoS_Report
• https://vuldb.com/cve/CVE-2026-94094
• https://vuldb.com/submit/882009
• https://vuldb.com/vuln/408023
• https://vuldb.com/vuln/408023/cti

Published

Sep 20, 2026

Last Modified

Sep 21, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-94089A vulnerability was determined in D-Link DIR-868L 2.01b05. T…10
• CVE-2026-9409A flaw has been found in Sushmi-pal Invoice-System up to a0a…4.3
• CVE-2026-94090A security flaw has been discovered in JusticeRage Manalyze …6.3
• CVE-2026-94091A weakness has been identified in piskvorky gensim up to 4.4…5.5
• CVE-2026-94092A vulnerability was detected in dmlc dgl up to 2.1.0. This i…5.5
• CVE-2026-94093A security vulnerability has been detected in DLR-RM stable-…6.3
• CVE-2026-94095A vulnerability has been found in Netcore NBR200V2 1.3.24112…9.9
• CVE-2026-94096A vulnerability was found in Netcore NBR200V2 1.3.241127.071…9.9
• CVE-2026-94097A vulnerability was determined in Netcore NBR200V2 1.3.24112…10
• CVE-2026-94098A vulnerability was identified in Netcore NBR200V2 1.3.24112…9.1
• CVE-2026-94099A security flaw has been discovered in Netcore NBR200V2 1.3.…9.9
• CVE-2026-9410A vulnerability has been found in Sushmi-pal Invoice-System …4.3