CVE-2026-42437

Description

OpenClaw: Voice-call realtime WebSocket accepted oversized frames

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/openclaw/openclaw/commit/afadb7dae6738819ad9c7d2597ace0516957d20e
• https://github.com/openclaw/openclaw/security/advisories/GHSA-vw3h-q6xq-jjm5
• https://www.vulncheck.com/advisories/openclaw-denial-of-service-via-oversized-websocket-frames-in-voice-call-realtime-path
• https://github.com/openclaw/openclaw/pull/63890
• https://github.com/openclaw/openclaw
• https://github.com/advisories/GHSA-vw3h-q6xq-jjm5

CWEs

CWE-770