Executive brief
OpenClaw is a command dispatch platform that integrates with Feishu (a team collaboration tool) via webhooks and card actions. The product failed to properly validate authentication requests when encryption keys were missing or callback tokens were blank, allowing attackers to send unauthenticated commands that bypass Feishu's signature and replay protections. This could enable unauthorized command execution without proper authentication.
Technical details
This authentication bypass vulnerability exists in the Feishu webhook and card-action validation logic (CWE-287, CWE-294, CWE-1188). The root cause is a fail-open design: missing encryptKey configuration is incorrectly treated as valid, and blank card-action callback tokens are accepted as usable lifecycle tokens. This allows unauthenticated requests to reach command dispatch without Feishu signature verification or replay protection. The attack vector is network-based and requires no authentication or user interaction. Attackers can send crafted webhook or card-action requests to execute arbitrary commands. Version 2026.4.15 fixes this by implementing fail-closed validation: refusing to start webhook mode without an encryptKey, returning 401 for invalid signatures, and rejecting blank callback tokens before dispatch.
Affected products
- OpenClaw openclaw < 2026.4.15
Timeline
- 2026-04-16: disclosed
- 2026-04-15: patched: Version 2026.4.15 released with fail-closed validation
- 2026-05-06: advisory: GHSA-xh72-v6v9-mwhc published; GHSA-cjg8-85gj-v9q2 marked as duplicate and withdrawn on 2026-05-11