GHSA-q447-rj3r-2cgh

Suggest an improvement
Source
https://github.com/advisories/GHSA-q447-rj3r-2cgh
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-q447-rj3r-2cgh/GHSA-q447-rj3r-2cgh.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-q447-rj3r-2cgh
Aliases
Published
2026-02-18T00:53:07Z
Modified
2026-03-05T22:11:21Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
OpenClaw affected by denial of service via unbounded webhook request body buffering
Details

Summary

Multiple webhook handlers accepted and buffered request bodies without a strict unified byte/time limit. A remote unauthenticated attacker could send oversized payloads and cause memory pressure, degrading availability.

Details

Affected packages:

  • openclaw (npm): <2026.2.12
  • clawdbot (npm): <=2026.1.24-3

Root cause:

  • Webhook code paths buffered request payloads without consistent maxBytes + timeoutMs enforcement.
  • Some SDK-backed handlers parse request bodies internally and needed stream-level guards.

Attack shape:

  • Send very large JSON payloads or slow/incomplete uploads to webhook endpoints.
  • Observe elevated memory usage and request handler pressure.

Impact

Remote unauthenticated availability impact (DoS) via request body amplification/memory pressure.

Patch details (implemented)

  • Added shared bounded request-body helper in src/infra/http-body.ts.
  • Exported helper in src/plugin-sdk/index.ts for extension reuse.
  • Migrated webhook body readers to shared helper for:
    • LINE
    • Nextcloud Talk
    • Google Chat
    • Zalo
    • BlueBubbles
    • Nostr profile HTTP
    • Voice-call
    • Gateway hooks
  • Added stream guards for SDK handlers that parse request bodies internally:
    • Slack
    • Telegram
    • Feishu
  • Added explicit Express JSON body limit handling for MS Teams webhook path.
  • Standardized failure responses:
    • 413 Payload Too Large
    • 408 Request Timeout

Tests

  • Added regression tests:
    • src/infra/http-body.test.ts
    • src/line/monitor.read-body.test.ts
    • extensions/nextcloud-talk/src/monitor.read-body.test.ts
  • Focused webhook/security test suite passes for patched paths.

Remediation

Upgrade to the first release containing this patch.

Credits

Thanks @vincentkoc for reporting.

Database specific 
{
    "cwe_ids":  [
        "CWE-400"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-02-18T00:53:07Z",
    "nvd_published_at":  null,
    "severity":  "HIGH"
}
References

Affected packages

npm / openclaw

Package

Name
openclaw
View open source insights on deps.dev
Purl
pkg:npm/openclaw

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2026.2.13

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-q447-rj3r-2cgh/GHSA-q447-rj3r-2cgh.json"

npm / clawdbot

Package

Name
clawdbot
View open source insights on deps.dev
Purl
pkg:npm/clawdbot

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
2026.1.24-3

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-q447-rj3r-2cgh/GHSA-q447-rj3r-2cgh.json"