AI agent vulnerability · OpenClaw

CVE-2026-26321: OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension

highCVSS 3.1 7.5GHSA-8jpq-5h99-ff5r

Summary The Feishu extension previously allowed sendMediaFeishu to treat attacker-controlled mediaUrl values as local filesystem paths and read them directly. Affected versions - = 2026.2.14 Impact If an attacker can influence tool calls (directly or via prompt injection), they may be able to exfiltrate local files by supplying paths such as /etc/passwd as mediaUrl.

Published Feb 17, 2026 · Updated Feb 20, 2026

Affected packages

openclaw

Ecosystem: npm
Affected: < 2026.2.14
Fixed in: 2026.2.14
Check: npm ls openclaw

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Summary

The Feishu extension previously allowed sendMediaFeishu to treat attacker-controlled mediaUrl values as local filesystem paths and read them directly.

Affected versions

< 2026.2.14

Patched versions

>= 2026.2.14

Impact

If an attacker can influence tool calls (directly or via prompt injection), they may be able to exfiltrate local files by supplying paths such as /etc/passwd as mediaUrl.

Remediation

Upgrade to OpenClaw 2026.2.14 or newer.

Notes

The fix removes direct local file reads from this path and routes media loading through hardened helpers that enforce local-root restrictions.

---

Fix commit 5b4121d60 confirmed on main and in v2026.2.14. Upgrade to openclaw >= 2026.2.14.

Credited to zpbrent.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More OpenClaw vulnerabilities

All OpenClaw entries