PT-2026-99164

CVE-2026-100527

Published

2026-09-26

Updated

2026-09-26

Description by

CVSS 4.0

6.9

Medium

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.8.2

Description A denial of service issue exists in the Browser extension relay. Unauthenticated network sources can exhaust the pending-authentication capacity by maintaining silent WebSocket upgrades. This action occupies all available pending slots, which prevents paired extensions from completing the Browser Relay Authentication v2 process.

Recommendations Update to version 2026.8.2.

Exploitability

Exploit

Fix

Impacts

Researchers

Rexpository

Vendors

Affected products

Weakness enumeration

CWE-400: Uncontrolled Resource Consumption

Related identifiers