Executive brief
OpenClaw, a tool for integrating various services, contains a security flaw in its Feishu extension. This vulnerability allows an attacker with low-level access to bypass security boundaries and read sensitive files from the host server. This could lead to the exposure of private configuration files, credentials, or other internal data, potentially compromising the entire system.
Technical details
A path traversal vulnerability (CWE-22) exists in the Feishu extension of OpenClaw within the `resolveUploadInput` function in `extensions/feishu/src/docx.ts`. The root cause is improper path resolution during `upload_image` operations, which fails to correctly enforce `localRoots` sandbox boundaries. A remote attacker with low privileges can provide manipulated path input to read arbitrary files from the host file system. The attack complexity is considered high as it may require specific environmental configurations or tool-calling contexts to execute. The issue is resolved in version 2026.3.28.
Affected products
- OpenClaw OpenClaw 2026.2.6 through 2026.3.24
Timeline
- 2026-03-29: advisory: GitHub Security Advisory GHSA-qf48-qfv4-jjm9 published
- 2026-04-27: disclosed: NVD and VulnCheck publication
- 2026-03-28: patched: Fixed in version 2026.3.28 via commit 764394c78b