CVE-2026-33573: Authorization Bypass in OpenClaw

The core of this vulnerability lies in the gateway agent RPC handling within OpenClaw. An attacker, posing as an authenticated operator with the necessary operator.write permission, can craft malicious requests that override the expected spawnedBy and workspaceDir values. By controlling these parameters, the attacker can effectively escape the intended workspace boundary. This escape grants the ability to execute arbitrary file and exec operations from any directory accessible to the process, significantly expanding the potential attack surface. The impact is particularly severe in environments where OpenClaw is used for sensitive data processing or automation, as an attacker could gain control over the system and potentially exfiltrate data or compromise other services.

1. Reserved2026-03-23
2. Published2026-03-29
3. Modified2026-03-30
4. EPSS updated2026-04-06

The primary mitigation for CVE-2026-33573 is to immediately upgrade OpenClaw to version 2026.3.11 or later. Prior to upgrading, assess the potential impact on existing workflows and consider a staged rollout to minimize disruption. If an immediate upgrade is not feasible, restrict operator permissions to the minimum necessary level, carefully reviewing and auditing existing permission configurations. Implement strict workspace boundary controls and monitor gateway agent RPC calls for suspicious activity. Consider implementing a Web Application Firewall (WAF) to filter malicious requests targeting the RPC endpoint, although this is not a substitute for patching.