Executive brief
OpenClaw is a tool framework that integrates with Feishu (DingTalk's competitor for team communication). The Feishu extension can fetch remote URLs without protection against server-side request forgery (SSRF), potentially allowing attackers to access internal services or resources. An attacker who can inject malicious tool calls or prompts could exploit this to retrieve sensitive data from internal systems and re-upload it to Feishu.
Technical details
OpenClaw's Feishu extension contains two SSRF vulnerabilities in URL fetching operations: the sendMediaFeishu() function and markdown image processing in Feishu DocX write/append operations. Both paths fetch attacker-controlled remote URLs without SSRF protections or validation. An attacker with the ability to influence tool calls (either directly or via prompt injection) can trigger requests to internal services, retrieve responses, and re-upload them as Feishu media, potentially exposing sensitive internal data. The vulnerability requires no authentication or user interaction beyond prompt injection capability. A fix was released in version 2026.2.14, which routes Feishu remote media fetching through hardened runtime helpers that enforce SSRF policies and size limits.
Affected products
- OpenClaw OpenClaw < 2026.2.14
Timeline
- 2026-02-18: disclosed: GitHub Security Advisory published
- 2026-02-14: patched: Fixed in version 2026.2.14