CVE-2026-29609

OpenClaw CVE-2026-29609 affects OpenClaw versions prior to 2026.2.14. The vulnerability resides in the fetchWithGuard function, which allocates the entire response payload in memory before enforcing maxBytes limits. Remote attackers can trigger memory exhaustion by serving oversized responses wit...