Which versions of Openclaw are affected by CVE-2026-33576?

OpenClaw versions before 2026.3.28 contain a critical vulnerability allowing unauthenticated remote attackers to force arbitrary media file downloads via Zalo messaging, consuming network bandwidth…. A patch is available.

How to fix or mitigate CVE-2026-33576?

Within 24 hours: Identify all OpenClaw instances and document current versions; temporarily disable or restrict Zalo messaging channel integrations if version < 2026.3.28. Within 7 days: Apply vendor-released patch to version 2026.3.28 or later (commit 68ceaf7a5); validate patched instances in staging environment before production rollout. Within 30 days: Conduct full inventory of media storage consumed during vulnerable window; implement sender authorization validation logging and alerting for media downloads.

Openclaw CVE-2026-33576

Q: What is the CVSS score of CVE-2026-33576?

CVE-2026-33576 has a CVSS 4.0 base score of 6.9 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-17431 MEDIUM

Incorrect Authorization (CWE-863)

2026-03-31 VulnCheck

GHSA-v2v2-f783-358j

Authentication Bypass Openclaw

6.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.9 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Mar 31, 2026 - 14:30 euvd

EUVD-2026-17431

Analysis Generated

Mar 31, 2026 - 14:30 vuln.today

Patch released

Mar 31, 2026 - 14:30 nvd

Patch available

CVE Published

Mar 31, 2026 - 14:10 nvd

MEDIUM 6.9

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.28.

DescriptionCVE.org

OpenClaw before 2026.3.28 downloads and stores inbound media from Zalo channels before validating sender authorization. Unauthorized senders can force network fetches and disk writes to the media store by sending messages that are subsequently rejected.

AnalysisAI

Unauthenticated attackers can force OpenClaw versions before 2026.3.28 to download and store arbitrary media files through Zalo messaging channels, bypassing sender authorization checks. The flaw allows remote exploitation without authentication (CVSS 9.8 critical) to consume network bandwidth and storage resources. No public exploit identified at time of analysis, though the attack vector is straightforward given the lack of pre-validation authorization checks. Vendor-released patch available via commit 68ceaf7a5.

Technical ContextAI

OpenClaw is a messaging platform integration framework that handles media from multiple channels including Zalo, a Vietnamese messaging service. The vulnerability stems from CWE-863 (Incorrect Authorization), where the application violates secure design principles by performing expensive operations-network fetches and disk I/O-before validating sender permissions. The CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates this is a network-accessible flaw with low attack complexity requiring no privileges or user interaction. The architecture flaw allows message processing to reach resource-intensive stages (HTTP download, filesystem write) before authorization gates are applied, creating an exploitable window for abuse. This represents a time-of-check-time-of-use variant where the expensive operation precedes the security check rather than following it.

RemediationAI

Upgrade to OpenClaw version 2026.3.28 or later, which implements proper authorization checks before media download and storage operations. The vendor-released patch is available via GitHub commit 68ceaf7a5f64a23e78b95eff055e4b497218312a at https://github.com/openclaw/openclaw/commit/68ceaf7a5f64a23e78b95eff055e4b497218312a. Organizations unable to immediately upgrade should consider temporary mitigation by disabling Zalo channel integration or implementing network-level controls to restrict inbound Zalo message processing to authorized senders only, though this may require custom firewall rules or API gateway filtering. Review stored media directories for unexpected files written during the vulnerable period, as unauthorized senders may have already exploited the flaw to consume storage. Consult the official security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-v2v2-f783-358j and the VulnCheck analysis at https://www.vulncheck.com/advisories/openclaw-unauthorized-media-download-via-zalo-channel for additional vendor guidance.