Loading vulnerability…
Authorization bypass in OpenClaw Zalouser allowlist mode via mutable group names
CVE-2026-32975 affects OpenClaw before version 2026.3.12. The vulnerability is a weak authorization flaw in Zalouser allowlist mode caused by using mutable group display names for authorization decisions instead of stable group identifiers. Because display names are not unique or immutable, an attacker can create a group whose display name matches that of an allowlisted group. When OpenClaw evaluates channel authorization based on the duplicated display name, it can incorrectly treat the attacker-controlled or unintended group as authorized and route that group's messages to the agent.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows an attacker to bypass channel authorization controls in Zalouser allowlist mode. This can cause messages from unintended or attacker-created groups to be accepted and routed to the agent as though they originated from an authorized group. Depending on the agent's capabilities and downstream processing, this may expose sensitive information, permit unauthorized command or message delivery, and undermine the integrity of trust boundaries enforced by the allowlist.
If you can’t patch tonight, do this now.
If immediate upgrade is not possible, avoid relying on Zalouser allowlist mode where authorization is based on group display names. Restrict creation of new groups where possible, monitor for duplicate or suspicious group names matching allowlisted groups, and add compensating validation to verify immutable group identifiers before routing messages to the agent. Review logs and message-routing history for evidence of unauthorized groups being treated as allowlisted.
Patch, then assume compromise.
Upgrade OpenClaw to version 2026.3.12 or later, which is the first version indicated as not affected. Authorization logic should use stable, unique group identifiers rather than mutable display names when enforcing allowlist decisions.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
7 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.