OpenClaw WebSocket Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in OpenClaw versions prior to 2026.3.28. The issue arises because the gateway accepts an unlimited number of concurrent, unauthenticated WebSocket upgrade requests without first allocating a budget for authentication. This flaw allows unauthenticated network attackers to consume socket and worker resources, disrupting WebSocket service for legitimate users.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, where legitimate clients experience disrupted WebSocket availability due to exhausted socket and worker resources.

Remediation

Users can upgrade to OpenClaw version 2026.3.28 or later to address this vulnerability.