OpenClaw Flaws Let Attackers Bypass Group Allowlists and Sender Policies

Two high-severity vulnerabilities in OpenClaw exposed weaknesses in how the platform enforced messaging restrictions in its chat integrations. CVE-2026-32975 affects versions before 2026.3.12 and stems from weak authorization in Zalouser allowlist mode, where access checks used mutable group display names instead of stable group identifiers. That design allowed an attacker to create a group with the same name as an allowlisted group and bypass channel authorization, potentially causing messages from unintended groups to be routed to the agent.

A second flaw, CVE-2026-33578, affects versions before 2026.3.28 in the Google Chat and Zalouser extensions. In that case, route-level group allowlist policies could silently downgrade to an open sender policy, letting attackers bypass configured sender restrictions and interact with bots that should have been limited to approved groups. Both issues were rated high severity with impact to confidentiality, integrity, and availability, and advisories and code references were published alongside fixes in newer OpenClaw releases.