CVE-2026-33576 in OpenClaw
摘要 (英语)
OpenClaw before 2026.3.28 downloads and stores inbound media from Zalo channels before validating sender authorization. Unauthorized senders can force network fetches and disk writes to the media store by sending messages that are subsequently rejected.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
负责
VulnCheck
预定
2026-03-23
披露
2026-03-31
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 354399 | OpenClaw 权限提升 | 863 | 未定义 | 官方修复 | CVE-2026-33576 |