https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T06:22:58.476392+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-openclaw-cli-cve-2026-41334 BREW-openclaw-cli-CVE-2026-41334 — OpenClaw: Image pixel-limit guard can fail open on sips and allow decompression-bomb DoS 2026-10-05T06:22:58.481683+00:00

Affected: Homebrew: openclaw-cli

## Summary Image pixel-limit guard can fail open on sips and allow decompression-bomb DoS

## Current Maintainer Triage - Status: open - Normalized severity: medium - Assessment: Shipped v2026.3.28 image processing could fail open on oversized pixel counts and allow decompression-bomb DoS, an availability issue that is valid at medium.

## Affected Packages / Versions - Package: `openclaw` (npm) - Latest published npm version: `2026.3.31` - Vulnerable version range: `<=2026.3.28` - Patched versions: `>= 2026.3.31` - First stable tag containing the fix: `v2026.3.31`

## Fix Commit(s) - `0ed4f8a72bb140045962e97ab01c94c076b758a4` — 2026-03-31T22:52:55+09:00

OpenClaw thanks @AntAISecurityLab for reporting.

 https://cve.radiocsirt.org/vuln/euvd-2026-292923 EUVD-2026-292923 2026-10-05T06:22:58.481756+00:00 EUVD-2026-292923 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41334 fkie_cve-2026-41334 2026-10-05T06:22:58.481773+00:00

OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce pixel-limit guards on sips. Attackers can exploit this by uploading oversized images to cause denial of service through excessive memory consumption.

 https://cve.radiocsirt.org/vuln/ghsa-72fj-c222-7598 GHSA-72fj-c222-7598 2026-10-05T06:22:58.481797+00:00

OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce pixel-limit guards on sips. Attackers can exploit this by uploading oversized images to cause denial of service through excessive memory consumption.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0948 WID-SEC-W-2026-0948 — OpenClaw: Mehrere Schwachstellen 2026-10-05T06:22:58.481812+00:00

Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Privilegien zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.