{"id":7600,"date":"2026-04-04T15:56:06","date_gmt":"2026-04-04T06:56:06","guid":{"rendered":"https:\/\/jore2.com\/community-3644-openclaw-privilege-escalation-vulnerability\/"},"modified":"2026-04-05T11:45:39","modified_gmt":"2026-04-05T02:45:39","slug":"community-3644-openclaw-privilege-escalation-vulnerability","status":"publish","type":"post","link":"https:\/\/jore2.com\/?p=7600","title":{"rendered":"\uc624\ud508\ud074\ub85c\uc758 \uc228\uaca8\uc9c4 \ubb38, \/pair approve\uac00 \ub9cc\ub4e0 \uad8c\ud55c \uc0c1\uc2b9\uc758 \ud568\uc815"},"content":{"rendered":"<div class=\"jore2-editor-byline\">\n<p><strong>\ubc30\uc18c\ub77c<\/strong><\/p>\n<\/div>\n<p>\ucd5c\uadfc \uae00\ub85c\ubc8c \uac1c\ubc1c \ucee4\ubba4\ub2c8\ud2f0\ub97c \ub728\uac81\uac8c \ub2ec\uad6c\uace0 \uc788\ub294 \ud654\uc81c\ub294 \uc624\ud508\ud074\ub85c\uc758 \uc0c8\ub85c\uc6b4 \ubcf4\uc548 \ucde8\uc57d\uc810\uc785\ub2c8\ub2e4. \ub2e8\uc21c\ud55c \ubc84\uadf8 \uc218\uc815\uc744 \ub118\uc5b4, \uc2dc\uc2a4\ud15c\uc758 \uad8c\ud55c \uad00\ub9ac \ub85c\uc9c1\uc5d0 \uc874\uc7ac\ud588\ub358 \uce58\uba85\uc801\uc778 \uc124\uacc4 \uacb0\ud568\uc774 \ub4dc\ub7ec\ub098\uba74\uc11c \ub9ce\uc740 \uc804\ubb38\uac00\ub4e4\uc774 \uc774 \uc774\uc288\uc5d0 \uc8fc\ubaa9\ud558\uace0 \uc788\uc2b5\ub2c8\ub2e4. \ud2b9\ud788 NVD \uc5d0\uc11c \uacf5\uc2dd\uc801\uc73c\ub85c CVE-2026-33579 \ub85c \ub4f1\ub85d\ub41c \uc774 \ucde8\uc57d\uc810\uc740 2026.3.28 \ubc84\uc804 \uc774\uc804\uc758 \uc624\ud508\ud074\ub85c \uc778\uc2a4\ud134\uc2a4\uc5d0\uc11c \ubc1c\uacac\ub418\uc5c8\uc73c\uba70, \ud575\uc2ec \uc6d0\uc778\uc740 \/pair approve \uba85\ub839\uc5b4\uac00 \ud638\ucd9c\uc790\uc758 \uad8c\ud55c \ubc94\uc704\ub97c \uc81c\ub300\ub85c \uc804\ub2ec\ud558\uc9c0 \ubabb\ud588\ub2e4\ub294 \uc810\uc5d0 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\uc774 \ubb38\uc81c\uac00 \uc8fc\ubaa9\ubc1b\ub294 \uc774\uc720\ub294 \uadf8 \ud30c\uae09\ub825\uc774 \uc608\uc0c1\ubcf4\ub2e4 \ud6e8\uc52c \ubcf5\uc7a1\ud558\uace0 \ubbf8\ubb18\ud558\uae30 \ub54c\ubb38\uc785\ub2c8\ub2e4. \uc77c\ubc18\uc801\uc778 \ubcf4\uc548 \uc774\uc288\uac00 \uc678\ubd80\uc5d0\uc11c \ubb34\uc791\uc704 \uba54\uc2dc\uc9c0\ub97c \ubcf4\ub0b4\ub294 \uac83\uc73c\ub85c \uc2dc\uc791\ub41c\ub2e4\uba74, \uc774\ubc88 \ucde8\uc57d\uc810\uc740 \uc774\ubbf8 \uac8c\uc774\ud2b8\uc6e8\uc774 \uc811\uadfc \uad8c\ud55c\uc744 \uac00\uc9c4 \uc0ac\uc6a9\uc790\uac00 \ud2b9\uc815 \uba85\ub839\uc5b4\ub97c \ud1b5\ud574 \ub354 \ub113\uc740 \uad8c\ud55c\uc744 \ud68d\ub4dd\ud560 \uc218 \uc788\ub2e4\ub294 \uc810\uc5d0\uc11c \ub3c5\ud2b9\ud569\ub2c8\ub2e4. \uc989, \uad00\ub9ac\uc790 \uad8c\ud55c\uc774 \uc5c6\ub294 \uc0ac\uc6a9\uc870\ucc28\ub3c4 \ub514\ubc14\uc774\uc2a4 \ud398\uc5b4\ub9c1 \uad8c\ud55c\ub9cc \uc788\ub2e4\uba74, \ub300\uae30 \uc911\uc778 \ub514\ubc14\uc774\uc2a4 \uc694\uccad\uc744 \uc2b9\uc778\ud558\uba74\uc11c \uad00\ub9ac\uc790 \uad8c\ud55c\uae4c\uc9c0 \ud3ec\ud568\ud558\ub294 \uad11\ubc94\uc704\ud55c \ubc94\uc704\ub97c \ud68d\ub4dd\ud560 \uc218 \uc788\ub294 \uacbd\ub85c\uac00 \uc5f4\ub824 \uc788\uc5c8\ub358 \uac83\uc785\ub2c8\ub2e4. \uc774\ub294 \uc2dc\uc2a4\ud15c \ub0b4\ubd80\uc758 \ud655\uc7a5 \ubaa8\ub4c8\uacfc \uc778\ud504\ub77c \ub808\uc774\uc5b4 \uac04\uc758 \uad8c\ud55c \uac80\uc99d \ub85c\uc9c1\uc774 \uc11c\ub85c \ub2e4\ub978 \ubc29\uc2dd\uc73c\ub85c \uc791\ub3d9\ud558\uba74\uc11c \ubc1c\uc0dd\ud55c \uc77c\uc885\uc758 \ud2c8\uc0c8 \ud604\uc0c1\uc774\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\ud558\ucee4 \ub274\uc2a4\uc640 \uac19\uc740 \uc8fc\uc694 \uae30\uc220 \ud3ec\ub7fc\uc5d0\uc11c\ub294 \uc624\ud508\ud074\ub85c\uc758 \uc81c\uc791\uc790\uac00 \uc9c1\uc811 \uc774 \ubb38\uc81c\ub97c \ud574\uba85\ud558\uba70, \uc774\uac83\uc774 \ud154\ub808\uadf8\ub7a8\uc774\ub098 \ub514\uc2a4\ucf54\ub4dc \uac19\uc740 \ud2b9\uc815 \uba54\uc2e0\uc800\uc758 \uace0\uc720\ud55c \uacb0\ud568\uc774 \uc544\ub2c8\ub77c \uacf5\uc720\ub41c \ud50c\ub7ec\uadf8\uc778 \uba85\ub839\uc5b4 \ucc98\ub9ac\uae30\uc5d0\uc11c \ubc1c\uc0dd\ud55c \ubb38\uc81c\uc784\uc744 \uba85\ud655\ud788 \ud588\uc2b5\ub2c8\ub2e4. \uc81c\uc791\uc790\uc758 \uc124\uba85\uc5d0 \ub530\ub974\uba74, \ucd08\uae30 \ud328\uce58\uac00 \uac8c\uc774\ud2b8\uc6e8\uc774 RPC \uacbd\ub85c\ub294 \uac15\ud654\ud588\uc9c0\ub9cc, \/pair approve \ud50c\ub7ec\uadf8\uc778 \uba85\ub839\uc5b4 \uacbd\ub85c\uc5d0\uc11c\ub294 \ud638\ucd9c\uc790 \ubc94\uc704\ub97c \uc804\ub2ec\ud558\ub294 \ub85c\uc9c1\uc774 \ub204\ub77d\ub418\uc5b4 \ud575\uc2ec \ub85c\uc9c1\uc774 \ube48 \uac12\uc77c \ub54c \uae30\ubcf8\uc801\uc73c\ub85c \ud5c8\uc6a9\ub418\ub294 \ubc29\uc2dd\uc73c\ub85c \uc791\ub3d9\ud588\ub2e4\uace0 \ud569\ub2c8\ub2e4. \uc774\ub85c \uc778\ud574 \uc774\ubbf8 \uc2b9\uc778\ub41c \uba85\ub839\uc5b4 \ubc1c\uc1a1\uc790\uac00 \ucd5c\uc2e0 \ud398\uc5b4\ub9c1 \uc694\uccad\uc744 \uc2b9\uc778\ud558\ub294 \uacfc\uc815\uc5d0\uc11c \uad8c\ud55c \uc0c1\ud55c\uc120\uc744 \uc6b0\ud68c\ud560 \uc218 \uc788\uac8c \ub41c \uac83\uc785\ub2c8\ub2e4.<\/p>\n<p>\uc804\ubb38\uac00\ub4e4\uc758 \ubd84\uc11d\uc5d0 \ub530\ub974\uba74 \uc774 \ucde8\uc57d\uc810\uc740 \uc778\uc99d \uba54\ucee4\ub2c8\uc998\uc774 \ubd80\uc7ac\ud55c \uacbd\uc6b0 \uc57d 63% \uc758 \uc778\uc2a4\ud134\uc2a4\uc5d0\uc11c \uc989\uac01\uc801\uc778 \uc811\uadfc\uc774 \uac00\ub2a5\ud588\uc73c\uba70, \uacf5\uaca9\uc790\uac00 \ud398\uc5b4\ub9c1 \uc778\ud130\ud398\uc774\uc2a4\uc5d0 \uc811\uc18d\ud558\uc5ec \uad00\ub9ac\uc790 \uad8c\ud55c\uc744 \uc694\uad6c\ud558\ub294 \uc7a5\uce58\ub97c \ub4f1\ub85d\ud55c \ub4a4, \uc2a4\uc2a4\ub85c \uc2b9\uc778 \uba85\ub839\uc744 \ub0b4\ub9ac\ub294 \ub2e8\uacc4\ub97c \uac70\uce58\uba74 1 \ubd84\ub3c4 \ucc44 \uac78\ub9ac\uc9c0 \uc54a\uc544 \uc804\uccb4 \uc778\uc2a4\ud134\uc2a4\ub97c \uc7a5\uc545\ud560 \uc218 \uc788\uc5c8\uc2b5\ub2c8\ub2e4. \uc774\ub294 \ub2e8\uc21c\ud55c \uc811\uadfc \uad8c\ud55c \uc0c1\uc2b9\uc744 \ub118\uc5b4 \ub370\uc774\ud130, \uc11c\ube44\uc2a4, \uc790\uaca9 \uc99d\uba85 \ub4f1 \uc778\uc2a4\ud134\uc2a4 \ub0b4 \ubaa8\ub4e0 \uc790\uc6d0\uc744 \uc704\ud611\ud560 \uc218 \uc788\ub294 \uc2ec\uac01\ud55c \uc0c1\ud669\uc73c\ub85c \uc774\uc5b4\uc84c\uc2b5\ub2c8\ub2e4. \ud604\uc7ac\ub294 \ub098\ube44\ub514\uc544, \ubc14\uc774\ud2b8\ub304\uc2a4, \ud150\uc13c\ud2b8, \uc624\ud508AI \ub4f1 \uc8fc\uc694 \uae30\uc5c5\ub4e4\uc758 \uac1c\ubc1c\uc790\ub4e4\uc774 \ucc38\uc5ec\ud558\uc5ec \ucf54\ub4dc\ubca0\uc774\uc2a4\ub97c \ub354\uc6b1 \uacac\uace0\ud558\uac8c \ub2e4\ub4ec\ub294 \uc791\uc5c5\uc774 \ud55c\ucc3d \uc9c4\ud589 \uc911\uc774\uba70, \ud5a5\ud6c4 \uc624\ud508\ud074\ub85c\uc758 \ubcf4\uc548 \uc544\ud0a4\ud14d\ucc98\uac00 \uc5b4\ub5bb\uac8c \uc9c4\ud654\ud560\uc9c0\uc5d0 \ub300\ud55c \uad00\uc2ec\uc774 \uc9d1\uc911\ub418\uace0 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ub2e8\uc21c\ud55c \ub514\ubc14\uc774\uc2a4 \uc5f0\uacb0 \uba85\ub839\uc5b4\uac00 \uc5b4\ub5bb\uac8c \uc804\uccb4 \uc778\uc2a4\ud134\uc2a4\uc758 \uad00\ub9ac\uc790 \uad8c\ud55c\uc744 \ube8f\uc5b4\uac08 \uc218 \uc788\uc5c8\ub294\uc9c0, \uc624\ud508\ud074\ub85c\uc758 \ucd5c\uc2e0 \ubcf4\uc548 \ucde8\uc57d\uc810\uc774 \uc804 \uc138\uacc4 \uac1c\ubc1c\uc790\ub4e4\uc758 \uc2dc\uc120\uc744 \ub044\ub294 \uc774\uc720\ub97c \ubd84\uc11d\ud569\ub2c8\ub2e4.<\/p>\n","protected":false},"author":11,"featured_media":7876,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[406],"tags":[4239,4242,4240,4241,4238],"class_list":["post-7600","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-406","tag-cve-2026-33579","tag-4242","tag-4240","tag-4241","tag-4238"],"featured_image_urls":{"full":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/04\/https-dev-to-uploads-s3-amazonaws-com-uploads-articles-s0q53vbo1zf57sijwbhj-1.webp",1114,627,false],"thumbnail":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/04\/https-dev-to-uploads-s3-amazonaws-com-uploads-articles-s0q53vbo1zf57sijwbhj-1-150x150.webp",150,150,true],"medium":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/04\/https-dev-to-uploads-s3-amazonaws-com-uploads-articles-s0q53vbo1zf57sijwbhj-1-300x169.webp",300,169,true],"medium_large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/04\/https-dev-to-uploads-s3-amazonaws-com-uploads-articles-s0q53vbo1zf57sijwbhj-1-768x432.webp",640,360,true],"large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/04\/https-dev-to-uploads-s3-amazonaws-com-uploads-articles-s0q53vbo1zf57sijwbhj-1-1024x576.webp",640,360,true],"1536x1536":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/04\/https-dev-to-uploads-s3-amazonaws-com-uploads-articles-s0q53vbo1zf57sijwbhj-1.webp",1114,627,false],"2048x2048":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/04\/https-dev-to-uploads-s3-amazonaws-com-uploads-articles-s0q53vbo1zf57sijwbhj-1.webp",1114,627,false],"morenews-large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/04\/https-dev-to-uploads-s3-amazonaws-com-uploads-articles-s0q53vbo1zf57sijwbhj-1-825x575.webp",825,575,true],"morenews-medium":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/04\/https-dev-to-uploads-s3-amazonaws-com-uploads-articles-s0q53vbo1zf57sijwbhj-1-590x410.webp",590,410,true]},"author_info":{"info":["\ubc30\uc18c\ub77c"]},"category_info":"<a href=\"https:\/\/jore2.com\/?cat=406\" rel=\"category\">\uc694\uc998\ub728\ub294\uc18c\uc2dd<\/a>","tag_info":"\uc694\uc998\ub728\ub294\uc18c\uc2dd","comment_count":"0","_links":{"self":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts\/7600","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7600"}],"version-history":[{"count":3,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts\/7600\/revisions"}],"predecessor-version":[{"id":9999,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts\/7600\/revisions\/9999"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/media\/7876"}],"wp:attachment":[{"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7600"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7600"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7600"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}