Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-43532

OpenClaw versions 2026.4.7 before 2026.4.10 fail to normalize Discord event cover image parameters in sandbox media processing. Attackers can bypass media normalization to inject host-local media references into channel action paths expecting normalized media.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.3%
CVSS Severity
CVSS v3 Score 7.7
Products affected by CVE-2026-43532
  • Openclaw » Openclaw » Version: 2026.4.7
    cpe:2.3:a:openclaw:openclaw:2026.4.7
  • Openclaw » Openclaw » Version: 2026.4.7-1
    cpe:2.3:a:openclaw:openclaw:2026.4.7-1
  • Openclaw » Openclaw » Version: 2026.4.8
    cpe:2.3:a:openclaw:openclaw:2026.4.8
  • Openclaw » Openclaw » Version: 2026.4.9
    cpe:2.3:a:openclaw:openclaw:2026.4.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved