Loading vulnerability…
Sender policy bypass in OpenClaw Google Chat and Zalouser extensions
CVE-2026-33578 is an incorrect authorization flaw in OpenClaw affecting versions before 2026.3.28. The vulnerability exists in the Google Chat and Zalouser extensions' sender policy handling, where route-level group allowlist policies can silently downgrade to an open policy during policy resolution. As a result, sender restrictions that administrators expect to be enforced are not applied correctly, allowing unauthorized senders to interact with bots even when group allowlist restrictions are configured.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows an attacker to bypass configured sender allowlist restrictions and interact with affected OpenClaw bots through the vulnerable Google Chat and Zalouser integrations. This undermines authorization boundaries and can expose bot functionality to unauthorized users. According to the provided scoring context, the vulnerability may have high confidentiality, integrity, and availability impact.
If you can’t patch tonight, do this now.
If immediate patching is not possible, restrict exposure of affected bots to trusted environments and minimize reliance on route-level group allowlist enforcement in the Google Chat and Zalouser extensions until the fix is applied. Implement compensating controls outside the vulnerable policy layer, such as upstream access restrictions, tighter bot deployment scoping, and monitoring for unauthorized bot interactions. Administrators should also audit existing route configurations to identify cases where allowlist policies may be silently treated as open.
Patch, then assume compromise.
Upgrade OpenClaw to version 2026.3.28 or later, which contains the fix for the sender policy resolution flaw. Review the referenced vendor patch/commit and security advisory to ensure the corrected authorization logic is deployed across all affected Google Chat and Zalouser extension instances. After upgrading, validate that route-level group allowlist policies are enforced as intended and no longer fall back to an open policy.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.