CVE-2026-101881

Published: Set 30, 2026 Last Modified: Set 30, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 7,1

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: low

User Interaction: none

Confidentiality: N/A

Integrity: N/A

Availability: N/A

MEDIUM 6,5

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: low

User Interaction: none

Scope: unchanged

Confidentiality: none

Integrity: none

Availability: high

Description

AI Translation Available

OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway WebSocket transport that allows connected gateways to exhaust node memory. Attackers can send an unending sequence of WebSocket continuation frames without EndOfMessage to cause unbounded memory growth until the node process crashes.

770

Allocation of Resources Without Limits or Throttling

Incomplete

Abstraction: Base Structure: Simple

Common Consequences

Security Scopes Affected:

Availability

Potential Impacts:

Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Dos: Resource Consumption (Other)

Applicable Platforms

All platforms may be affected

Likelihood of Exploit: High

View CWE Details

https://github.com/openclaw/openclaw-windows-node/security/…

https://github.com/openclaw/openclaw-windows-node/security/advisories/GHSA-xxr2…

https://github.com/openclaw/openclaw-windows-node/blob/v0.6…

https://github.com/openclaw/openclaw-windows-node/blob/v0.6.12/src/OpenClaw.Sha…

https://github.com/openclaw/openclaw-windows-node/commit/18…

https://github.com/openclaw/openclaw-windows-node/commit/1810e357aa0d0639099b34…

https://github.com/openclaw/openclaw-windows-node/releases/…

https://github.com/openclaw/openclaw-windows-node/releases/tag/v2026.7.1