OpenClaw Windows Node before version 2026.7.1 contains an uncontrolled allocation of memory resources in its WebSocket gateway transport. Based on the description, it is inferred that an attacker can send an endless chain of WebSocket continuation frames that never signal the end of a message, causing the node to grow memory usage without bound until the process runs out of memory and crashes. This results in a loss of service for the application or system that relies on the node, degrading availability without directly affecting confidentiality or integrity.

The affected product is OpenClaw Windows Node. All releases prior to 2026.7.1 are vulnerable, including the 0.6.12 and earlier builds distributed on GitHub. The vulnerability is present in the gateway component that handles WebSocket connections.

CVSS score of 7.1 indicates a high‑severity denial‑of‑service flaw. The likely attack vector is remote network access to the WebSocket endpoint, as the exploit requires only the ability to connect to the gateway. Based on the description, it is inferred that the attacker does not need special privileges or authentication, although discovery of the WebSocket path or bypassing any access controls could be necessary. No exploit probability data is publicly available, and the vulnerability is not listed in CISA’s KEV catalog. However, the lack of native resource limits means attackers can repeatedly apply the attack, potentially automated, leading to high impact on availability.