PT-2026-28496 · Openclaw · Openclaw

Hsongkai11 · CVE-2026-33572 · Published 2026-03-16 · Updated 2026-03-29

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.17

Description OpenClaw creates session transcript JSONL files with overly broad default permissions, allowing local users to read transcript contents. An attacker with local access can read these transcript files and extract sensitive information, including secrets from tool output.

Recommendations Update OpenClaw to version 2026.2.17 or later.

Exploit

Fix

Incorrect Permission

Incorrect Default Permissions

Weakness Enumeration

CWE-732

CWE-378

CWE-276

Related Identifiers

CVE-2026-33572

GHSA-9Q8J-CHC7-WPGP

GHSA-VR7J-G7JV-H5MP

Affected Products

Openclaw

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33572.json · Exploit
• https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-g7jv-h5mp · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/095d522099653367e1b76fa5bb09d4ddf7c8a57c · Patch
• https://osv.dev/vulnerability/CVE-2026-33572 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vr7j-g7jv-h5mp · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9q8j-chc7-wpgp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33572 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://vulncheck.com/advisories/openclaw-insufficient-file-permissions-in-session-transcript-files · Note
• https://twitter.com/CVEnew/status/2038250144865341472 · Twitter Post
• https://twitter.com/TheHackerWire/status/2038244572737032364 · Twitter Post