Miembros de
Boletines de Vulnerabilidades |
CVE-2026-33578 |
|
| Software afectado | |
| OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlist policies silently downgrade to open policy. Attackers can exploit this policy resolution flaw to bypass sender restrictions and interact with bots despite configured allowlist restrictions. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-33578 | |
