Executive brief
OpenClaw is a development tool that includes a Feishu (collaboration platform) extension for handling document uploads. The extension fails to properly validate file paths during image uploads, allowing attackers with authenticated access to read arbitrary files on the host system outside of intended sandbox restrictions, potentially exposing sensitive data.
Technical details
This is a path traversal vulnerability (CWE-22) in the resolveUploadInput function within extensions/feishu/src/docx.ts. The vulnerable component improperly resolves file paths during upload_image operations, bypassing the configured localRoots sandbox restrictions. An attacker with valid credentials (privileges required: low) and network access can exploit this to read arbitrary host files. The attack requires no user interaction. The vulnerability was fixed in version 2026.3.28 (commit 764394c78b enforced localRoots sandbox on Feishu docx upload file reads).
Affected products
- OpenClaw OpenClaw 2026.2.6 through 2026.3.24
Timeline
- 2026-03-29: disclosed
- 2026-04-28: advisory
- 2026-03-29: patched: Fix released in version 2026.3.28