Executive brief
OpenClaw is an AI agent platform that handles integrations with multiple messaging and collaboration services. Multiple webhook handlers in the system accepted and buffered incoming request bodies without enforcing size or time limits, allowing remote attackers to send oversized payloads that consume server memory and degrade service availability for all users.
Technical details
This vulnerability is an uncontrolled resource consumption issue (CWE-400) in webhook request handling. Multiple webhook code paths buffered HTTP request bodies without consistent maxBytes and timeoutMs enforcement; some SDK-backed handlers parsed request bodies internally without stream-level guards. A remote, unauthenticated attacker can exploit this by sending large JSON payloads or slow/incomplete uploads to webhook endpoints (e.g., LINE, Slack, Telegram, Nextcloud Talk, Google Chat, and others), causing elevated memory usage and request handler pressure that degrades availability. The fix introduced a shared bounded request-body helper in src/infra/http-body.ts with standardized responses (413 Payload Too Large, 408 Request Timeout) and applied it consistently across all affected webhook paths.
Affected products
- OpenClaw OpenClaw <2026.2.13
- OpenClaw clawdbot <=2026.1.24-3
Timeline
- 2026-02-18: disclosed: Advisory GHSA-q447-rj3r-2cgh published
- 2026-02-18: patched: Fix available in OpenClaw >=2026.2.13 and clawdbot >2026.1.24-3