# OpenClaw authentication bypass in Feishu webhook validation

Source: https://junglewise.ai/threats/openclaw-authentication-bypass-in-feishu-webhook-validation-5fe7b465  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-06. Updated: 2026-05-11  
License: CC BY 4.0 with a link back

Severity: critical · CVSS 9.8 · Published 2026-05-06

OpenClaw, an automation tool, contains a security flaw in how it handles Feishu webhooks and card actions. Due to insecure default settings, the system may fail to verify the identity of incoming requests, allowing unauthorized users to bypass security checks. This could enable an attacker to remotely execute arbitrary commands, potentially leading to a full system compromise or unauthorized data access.

Technologies: [Openclaw](https://junglewise.ai/threats/technologies/openclaw). Vendors: [Openclaw](https://junglewise.ai/threats/vendors/openclaw).

## Quick answers

**Is This vulnerability exploited in the wild?** No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

**How severe is This vulnerability?** Critical severity, with a CVSS score of 9.8, published 6 May 2026.

**Which products and versions are affected?** Openclaw < 2026.4.15.

**Is there a fix for This vulnerability?** A patch was published on 2026-04-14: Fix commit c8003f1 pushed to repository. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is This vulnerability attacked?** It is attacked over the network, in a software library.

**Am I affected?** Check whether you run Openclaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

OpenClaw versions prior to 2026.4.15 are vulnerable to an authentication bypass (CWE-287) and insecure default initialization (CWE-1188) within the Feishu extension. The vulnerability stems from a 'fail-open' logic where missing 'encryptKey' configurations or blank callback tokens are treated as valid, effectively bypassing signature verification and replay protection. A remote, unauthenticated attacker can exploit this by sending malformed webhook or card-action traffic to reach the command dispatch component. This allows for arbitrary command execution within the context of the application. The issue is resolved in version 2026.4.15, which enforces 'fail-closed' validation.

## Affected products

- OpenClaw openclaw < 2026.4.15

## Timeline

- 2026-04-14: patched: Fix commit c8003f1 pushed to repository.
- 2026-04-16: advisory: Original advisory GHSA-xh72-v6v9-mwhc published.
- 2026-05-06: disclosed: CVE-2026-44109 published.

## References

- [https://github.com/openclaw/openclaw/security/advisories/GHSA-xh72-v6v9-mwhc](https://github.com/openclaw/openclaw/security/advisories/GHSA-xh72-v6v9-mwhc)
- [https://github.com/openclaw/openclaw/commit/c8003f1b33ed2924be5f62131bd28742c5a41aae](https://github.com/openclaw/openclaw/commit/c8003f1b33ed2924be5f62131bd28742c5a41aae)
- [https://www.vulncheck.com/advisories/openclaw-authentication-bypass-in-feishu-webhook-and-card-action-validation](https://www.vulncheck.com/advisories/openclaw-authentication-bypass-in-feishu-webhook-and-card-action-validation)

## Related threats

- [OpenClaw incorrect authorization in mcp.app.view method](https://junglewise.ai/threats/cve-2026-102807-openclaw-before-2026-9-4-contains-an-incorrect-authorization)
- [OpenClaw incorrect authorization in Gateway media root allowlist](https://junglewise.ai/threats/cve-2026-102806-openclaw-before-2026-9-5-contains-an-incorrect-authorization)
- [OpenClaw exec approval bypass in Google Meet node commands](https://junglewise.ai/threats/cve-2026-100599-openclaw-versions-2026-5-1-through-2026-7-0-fail-to-apply-the)
- [OpenClaw Signal approval reaction binding logic error](https://junglewise.ai/threats/cve-2026-100598-openclaw-npm-package-openclaw-before-2026-7-1-incorrectly-binds)
- [OpenClaw time-of-check time-of-use race condition in filesystem operations](https://junglewise.ai/threats/cve-2026-100597-openclaw-npm-package-openclaw-before-2026-7-1-is-vulnerable-to-a)