CVE-2026-41334
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Apr 23, 2026
Vendor
unknown
Description
OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce pixel-limit guards on sips. Attackers can exploit this by uploading oversized images to cause denial of service through excessive memory consumption.