CVE-2026-33578: OpenClaw < 2026.3.28 - Sender Policy Allowlist Bypass via Policy Downgrade in Google Chat and Zalouser Extensions

Published Mar 31, 2026
·
Updated

Summary

When only a route-level group allowlist was configured, sender policy resolution silently downgraded from allowlist to open instead of preserving the configured group policy.

Impact

Any member of an allowlisted Google Chat space or Zalouser group could interact with the bot even when the operator intended sender-level restrictions.

Affected Component

extensions/googlechat/src/monitor-access.ts, extensions/zalouser/src/monitor.ts

Fixed Versions

- Affected: <= 2026.3.24 - Patched: >= 2026.3.28 - Latest stable 2026.3.28 contains the fix.

Fix

Fixed by commit e64a881ae0 (Channels: preserve routed group policy).

Other sources

OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlist policies silently downgrade to open policy. Attackers can exploit this policy resolution flaw to bypass sender restrictions and interact with bots despite configured allowlist restrictions.

MITRE

Affected Software

3 affected componentsFixes available
OpenClaw OpenClaw<2026.3.28
npm/openclaw<=2026.3.24
2026.3.28
OpenClaw Openclaw Node.js<2026.3.28

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade npm/openclaw to a version that resolves this vulnerability.

    Fixed in 2026.3.28
  2. Upgrade

    Upgrade OpenClaw to a version that resolves this vulnerability.

    Fixed in 2026.3.28
  3. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch e64a881ae0

Event History

Mar 31, 2026
CVE Published
via MITRE·02:10 PM
Data Sourced
via MITRE·02:10 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Apr 1, 2026
Advisory Published
via GitHub·12:01 AM
Data Sourced
via GitHub·12:01 AM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2026-33578?

CVE-2026-33578 is considered a medium severity vulnerability due to its potential to bypass sender policy allowlists.

2

How do I fix CVE-2026-33578?

To fix CVE-2026-33578, update OpenClaw to version 2026.3.28 or later.

3

What versions of OpenClaw are affected by CVE-2026-33578?

OpenClaw versions prior to 2026.3.28 are affected by CVE-2026-33578.

4

What type of vulnerability is CVE-2026-33578?

CVE-2026-33578 is a sender policy allowlist bypass vulnerability.

5

In which extensions does CVE-2026-33578 occur?

CVE-2026-33578 occurs in the Google Chat and Zalouser extensions within OpenClaw.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203