Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · OpenClaw

CVE-2026-29612: OpenClaw: denial of service through large base64 media files allocating large buffers before limit checks

mediumCVSS 4.0 6.8 · 3.1 5.5GHSA-w2cg-vxx6-5xjg

Summary Base64-backed media inputs could be decoded into Buffers before enforcing decoded-size budgets. An attacker supplying oversized base64 payloads can force large allocations, causing memory pressure and denial of service. Attack Scenario Notes - Recommended deployments bind the gateway to loopback by default and require gateway auth for HTTP endpoints.

Published Feb 18, 2026 · Updated Mar 6, 2026

Affected packages

openclaw

Ecosystem
npm
Affected
< 2026.2.14
Fixed in
2026.2.14
Check
npm ls openclaw

clawdbot

Ecosystem
npm
Affected
<= 2026.1.24-3
Fixed in
No patched version yet
Check
npm ls clawdbot

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Summary

Base64-backed media inputs could be decoded into Buffers before enforcing decoded-size budgets. An attacker supplying oversized base64 payloads can force large allocations, causing memory pressure and denial of service.

Attack Scenario Notes

  • Recommended deployments bind the gateway to loopback by default and require gateway auth for HTTP endpoints. In that configuration, this is best modeled as a local/authorized DoS.
  • If an operator exposes the gateway to untrusted networks (or disables/weakens auth and rate limits), treat this as a higher-severity network DoS risk.

Affected Packages / Versions

  • openclaw (npm): <= 2026.2.13
  • clawdbot (npm): <= 2026.1.24-3

Fixed In

  • openclaw (npm): 2026.2.14 (planned)
  • clawdbot (npm): no patched release planned; migrate to openclaw

Fix Commit(s)

  • 31791233d60495725fa012745dde8d6ee69e9595

Credits

Thanks @vincentkoc for reporting.

Credited to vincentkoc.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More OpenClaw vulnerabilities

All OpenClaw entries