CVE-2026-33578 — OpenClaw < 2026.3.28 - Sender Policy Allowlist Bypass via Policy Downgrade in Google Chat and Zalouser Extensions

Affected: OpenClaw

OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlist policies silently downgrade to open policy. Attackers can exploit this policy resolution flaw to bypass sender restrictions and interact with bots despite configured allowlist restrictions.

GHSA-63mg-xp9j-jfcm — OpenClaw: Google Chat and Zalouser group sender allowlist bypass via policy downgrade

Affected: npm: openclaw

## Summary

When only a route-level group allowlist was configured, sender policy resolution silently downgraded from `allowlist` to `open` instead of preserving the configured group policy.

## Impact

Any member of an allowlisted Google Chat space or Zalouser group could interact with the bot even when the operator intended sender-level restrictions.

## Affected Component

`extensions/googlechat/src/monitor-access.ts, extensions/zalouser/src/monitor.ts`

## Fixed Versions

- Affected: `<= 2026.3.24` - Patched: `>= 2026.3.28` - Latest stable `2026.3.28` contains the fix.

## Fix

Fixed by commit `e64a881ae0` (`Channels: preserve routed group policy`).

OpenClaw thanks @AntAISecurityLab for reporting.

Most recent entries from all

CVE-2026-33578 — OpenClaw < 2026.3.28 - Sender Policy Allowlist Bypass via Policy Downgrade in Google Chat and Zalouser Extensions

GHSA-63mg-xp9j-jfcm — OpenClaw: Google Chat and Zalouser group sender allowlist bypass via policy downgrade