{"id":"EUVD-2026-17431","enisaUuid":"7eeca37f-9815-319f-bea5-b49664448f0c","description":"OpenClaw before 2026.3.28 downloads and stores inbound media from Zalo channels before validating sender authorization. Unauthorized senders can force network fetches and disk writes to the media store by sending messages that are subsequently rejected.","datePublished":"Mar 31, 2026, 2:10:30 PM","dateUpdated":"Sep 24, 2026, 2:17:21 PM","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-v2v2-f783-358j\nhttps://github.com/openclaw/openclaw/commit/68ceaf7a5f64a23e78b95eff055e4b497218312a\nhttps://www.vulncheck.com/advisories/openclaw-unauthorized-media-download-via-zalo-channel\n","aliases":"CVE-2026-33576\n","assigner":"VulnCheck","epss":0.36,"enisaIdProduct":[{"id":"1de253ac-423d-338c-8978-87e24f9a8961","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.3.28"}],"enisaIdVendor":[{"id":"32aaa715-b6ab-3920-b4ca-9a156c0ba5f1","vendor":{"name":"OpenClaw"}}],"enisaIdVulnerability":[{"id":"611a426e-c7fc-35b3-b704-f7de98ae0478","vulnerability":{"id":"CVE-2026-33576","description":"OpenClaw before 2026.3.28 downloads and stores inbound media from Zalo channels before validating sender authorization. Unauthorized senders can force network fetches and disk writes to the media store by sending messages that are subsequently rejected.","datePublished":"Mar 31, 2026, 2:10:30 PM","dateUpdated":"Sep 24, 2026, 2:17:21 PM","status":"PUBLISHED","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-v2v2-f783-358j\nhttps://github.com/openclaw/openclaw/commit/68ceaf7a5f64a23e78b95eff055e4b497218312a\nhttps://www.vulncheck.com/advisories/openclaw-unauthorized-media-download-via-zalo-channel\n","enisa_id":"EUVD-2026-17431\n","assigner":"VulnCheck","epss":0.36,"dataProcessed":"Nov 11, 2026, 7:23:33 AM","vulnerabilityProduct":[{"id":"41b107f4-9f13-338a-b729-855a08ea6f55","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.3.28"}],"vulnerabilityVendor":[{"id":"592773b6-0205-3151-a63b-b64a011e5e0b","vendor":{"name":"OpenClaw"}}]}}],"enisaIdAdvisory":[{"id":"f4305199-2743-337f-bf96-17f1219241d2","advisory":{"id":"WID-SEC-W-2026-0930","description":"OpenClaw: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.","datePublished":"Mar 30, 2026, 10:00:00 PM","dateUpdated":"Apr 28, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0930.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-0930\n","aliases":"CVE-2026-33576\nCVE-2026-33577\nCVE-2026-33578\nCVE-2026-33579\nCVE-2026-33580\nCVE-2026-33581\nCVE-2026-34503\nCVE-2026-34504\nCVE-2026-41303\nCVE-2026-41332\nCVE-2026-41342\nCVE-2026-41344\nCVE-2026-41361\nCVE-2026-41367\nCVE-2026-41368\nCVE-2026-41371\nCVE-2026-41380\nCVE-2026-41395\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"916871f7-7abb-33b2-a5b7-8fab819bbc05","product":{"name":"2026.3.28","vendor":{"name":"open source"}}},{"id":"dd101b2f-0984-30e9-8e6c-624c033416de","product":{"name":"OpenClaw","vendor":{"name":"n/a"}}}]}}]}