AI agent vulnerability · OpenClaw

CVE-2026-28451: OpenClaw has two SSRF via sendMediaFeishu and markdown image fetching in Feishu extension

highCVSS 3.1 8.6GHSA-x22m-j5qq-j49m

Summary The Feishu extension could fetch attacker-controlled remote URLs in two paths without SSRF protections: - sendMediaFeishu(mediaUrl) - Feishu DocX markdown image URLs (write/append - image processing) Affected versions - = 2026.2.14 Impact If an attacker can influence tool calls (directly or via prompt injection), they may be able to trigger requests to internal services and re-upload the response as Feishu…

Published Feb 18, 2026 · Updated Mar 11, 2026

Affected packages

openclaw

Ecosystem: npm
Affected: < 2026.2.14
Fixed in: 2026.2.14
Check: npm ls openclaw

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Summary

The Feishu extension could fetch attacker-controlled remote URLs in two paths without SSRF protections:

sendMediaFeishu(mediaUrl)
Feishu DocX markdown image URLs (write/append -> image processing)

Affected versions

< 2026.2.14

Patched versions

>= 2026.2.14

Impact

If an attacker can influence tool calls (directly or via prompt injection), they may be able to trigger requests to internal services and re-upload the response as Feishu media.

Remediation

Upgrade to OpenClaw 2026.2.14 or newer.

Notes

The fix routes Feishu remote media fetching through hardened runtime helpers that enforce SSRF policies and size limits.

Credited to zpbrent.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More OpenClaw vulnerabilities

All OpenClaw entries