Executive brief
OpenClaw is a tool platform that integrates with third-party services like Feishu (DingTalk). A vulnerability in the Feishu extension allows attackers to read arbitrary files from the server's local filesystem by manipulating the media URL parameter. An attacker who can control function calls—either directly or through prompt injection attacks—could exfiltrate sensitive files like configuration files or passwords, compromising data confidentiality.
Technical details
The vulnerability is a path traversal flaw (CWE-22) in the sendMediaFeishu function of OpenClaw's Feishu extension. The vulnerable component treats attacker-controlled mediaUrl parameter values as local filesystem paths without proper validation, allowing direct reads of arbitrary files. The attack vector is network-based with no privileges or user interaction required; however, an attacker must be able to influence tool calls either directly or via prompt injection. An attacker can exfiltrate sensitive local files (e.g., /etc/passwd) by supplying filesystem paths as mediaUrl values. The vulnerability is fixed in OpenClaw version 2026.2.14 and later, which removes direct file reads and enforces local-root directory restrictions through hardened helpers.
Affected products
- OpenClaw OpenClaw < 2026.2.14
Timeline
- 2026-02-15: disclosed: Advisory published
- 2026-02-14: patched: Fix available in version 2026.2.14