Search: CVE-2026-32062

OpenClaw voice-call media-stream WebSocket connections accepted upgrades before validating streams, allowing unauthenticated pre-start sockets to remain open and increase resource usage. This vulnerability affects openclaw versions up to 2026.2.21-2 and @openclaw/voice-call versions up to 2026.2.21. The issue is patched in version 2026.2.22. The vulnerability can lead to resource exhaustion and degraded service availability under sustained abuse.