# CVE-2026-33572

## Summary

- **CVE ID:** CVE-2026-33572
- **Severity:** MEDIUM
- **CVSS Score:** 8.4 (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)
- **CWE:** CWE-378
- **Published:** Mar 29, 2026
- **Last Modified:** Jun 23, 2026

## Description

OpenClaw before 2026.2.17 creates session transcript JSONL files with overly broad default permissions, allowing local users to read transcript contents. Attackers with local access can read transcript files to extract sensitive information including secrets from tool output.

## Affected Products

- OpenClaw — OpenClaw (0)
- OpenClaw — OpenClaw (2026.2.17)

## References

- [CNA](https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-g7jv-h5mp)
- [CNA](https://github.com/openclaw/openclaw/commit/095d522099653367e1b76fa5bb09d4ddf7c8a57c)
- [CNA](https://www.vulncheck.com/advisories/openclaw-insufficient-file-permissions-in-session-transcript-files)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.12%
- **EPSS Percentile:** 2.0

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._