{"id":"CVE-2026-33572","state":"PUBLISHED","title":"OpenClaw < 2026.2.17 - Insufficient File Permissions in Session Transcript Files","description":"OpenClaw before 2026.2.17 creates session transcript JSONL files with overly broad default permissions, allowing local users to read transcript contents. Attackers with local access can read transcript files to extract sensitive information including secrets from tool output.","publishedAt":"2026-03-29T12:44:30.369Z","updatedAt":"2026-06-23T16:15:32.989Z","severity":{"score":6.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["OpenClaw OpenClaw"],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2026.2.17","versionType":"semver"},{"version":"2026.2.17","status":"unaffected","versionType":"semver"}]}],"references":["https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-g7jv-h5mp","https://github.com/openclaw/openclaw/commit/095d522099653367e1b76fa5bb09d4ddf7c8a57c","https://www.vulncheck.com/advisories/openclaw-insufficient-file-permissions-in-session-transcript-files"],"weaknesses":["CWE-378"],"ingestedAt":"2026-10-29T20:11:40.391Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/33xxx/CVE-2026-33572.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-33572","state":"PUBLISHED","datePublished":"2026-03-29T12:44:30.369Z","dateUpdated":"2026-06-23T16:15:32.989Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-03-23T11:00:48.407Z"},"containers":{"cna":{"title":"OpenClaw < 2026.2.17 - Insufficient File Permissions in Session Transcript Files","descriptions":[{"lang":"en","value":"OpenClaw before 2026.2.17 creates session transcript JSONL files with overly broad default permissions, allowing local users to read transcript contents. Attackers with local access can read transcript files to extract sensitive information including secrets from tool output."}],"affected":[{"vendor":"OpenClaw","product":"OpenClaw","packageURL":"pkg:npm/openclaw","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2026.2.17","versionType":"semver"},{"version":"2026.2.17","status":"unaffected","versionType":"semver"}]}],"references":[{"url":"https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-g7jv-h5mp","name":"GitHub Security Advisory (GHSA-vr7j-g7jv-h5mp)","tags":["vendor-advisory"]},{"url":"https://github.com/openclaw/openclaw/commit/095d522099653367e1b76fa5bb09d4ddf7c8a57c","name":"Patch Commit","tags":["patch"]},{"url":"https://www.vulncheck.com/advisories/openclaw-insufficient-file-permissions-in-session-transcript-files","name":"VulnCheck Advisory: OpenClaw < 2026.2.17 - Insufficient File Permissions in Session Transcript Files","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":6.8,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-378","lang":"en","description":"Creation of Temporary File With Insecure Permissions","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-06-23T16:15:32.989Z"},"datePublic":"2026-03-14T00:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*","versionEndExcluding":"2026.2.17"}]}]}],"x_generator":{"engine":"vulncheck"},"credits":[{"lang":"en","value":"花生可 (@hsongkai11)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-04-01T15:33:19.316532Z","id":"CVE-2026-33572","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-04-01T15:33:32.741Z"}}]}}}