CVE-2026-42437

creationtimestamp| type| source ---|---|--- 2026-05-05 14:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4gyxc7zt2h 2026-05-05 18:00:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4rcoj5ey2k...

CVE-2026-42437

OpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voice-call realtime WebSocket path that accepts oversized frames without proper validation. Remote attackers can send oversized WebSocket frames to cause service unavailability for deployments exposing th...