Executive brief
OpenClaw is a development toolkit that handles media downloads from Feishu (a workplace collaboration platform). The vulnerability allows attackers to write files outside the intended temporary directory by manipulating Feishu media identifiers. If an attacker can control the responses from Feishu, they could write arbitrary files to the system with the permissions of the OpenClaw process, potentially compromising system integrity or deploying malicious code.
Technical details
This is a path traversal vulnerability (CWE-22) in OpenClaw's Feishu media download flow (extensions/feishu/src/media.ts). The vulnerability stems from unsanitized interpolation of untrusted Feishu media keys (imageKey / fileKey) directly into temporary file paths. An attacker who can control Feishu API responses—via upstream compromise or network interception—can inject path traversal sequences (e.g., "../../../") to redirect downloaded bytes outside os.tmpdir(). The impact is arbitrary file write within the OpenClaw process's file permissions. The fix (version 2026.2.19+) removes key-derived naming, uses mkdtemp for isolated per-download directories, enforces trust-boundary validation, and adds repository guards against dynamic path construction patterns.
Affected products
- OpenClaw OpenClaw <= 2026.2.17
Timeline
- 2026-02-21: disclosed
- 2026-03-03: advisory
- 2026-02-21: patched: Fixed in version 2026.2.19