OpenClaw versions up to 2026.3.28 contain a vulnerability in the Tlon media downloads feature that allows bypassing core safety limits on size, count, and cleanup. This can lead to disk exhaustion through resource exhaustion, impacting availability. The issue is fixed in version 2026.3.31.