CVE-2026-43532
HIGH
NVD
CVSS Score
7.7
Severity
HIGH
Published
May 05, 2026
Vendor
unknown
Description
OpenClaw versions 2026.4.7 before 2026.4.10 fail to normalize Discord event cover image parameters in sandbox media processing. Attackers can bypass media normalization to inject host-local media references into channel action paths expecting normalized media.