CVE-2026-41399
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Apr 28, 2026
Vendor
unknown
Description
OpenClaw before 2026.3.28 accepts unbounded concurrent unauthenticated WebSocket upgrades without pre-authentication budget allocation. Unauthenticated network attackers can exhaust socket and worker capacity to disrupt WebSocket availability for legitimate clients.