CVE-2026-33572
HIGH
NVD
CVSS Score
8.4
Severity
HIGH
Published
Mar 29, 2026
Vendor
unknown
Description
OpenClaw before 2026.2.17 creates session transcript JSONL files with overly broad default permissions, allowing local users to read transcript contents. Attackers with local access can read transcript files to extract sensitive information including secrets from tool output.