GHSA-8jpq-5h99-ff5r

Source

https://github.com/advisories/GHSA-8jpq-5h99-ff5r

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-8jpq-5h99-ff5r/GHSA-8jpq-5h99-ff5r.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-8jpq-5h99-ff5r

Aliases

CVE-2026-26321

Published

2026-02-17T21:41:52Z

Modified

2026-02-20T16:58:05.071255Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension

Details

Summary

The Feishu extension previously allowed sendMediaFeishu to treat attacker-controlled mediaUrl values as local filesystem paths and read them directly.

Affected versions

< 2026.2.14

Patched versions

>= 2026.2.14

Impact

If an attacker can influence tool calls (directly or via prompt injection), they may be able to exfiltrate local files by supplying paths such as /etc/passwd as mediaUrl.

Remediation

Upgrade to OpenClaw 2026.2.14 or newer.

Notes

The fix removes direct local file reads from this path and routes media loading through hardened helpers that enforce local-root restrictions.

Fix commit 5b4121d60 confirmed on main and in v2026.2.14. Upgrade to openclaw >= 2026.2.14.

Database specific

{
    "github_reviewed": true,
    "github_reviewed_at": "2026-02-17T21:41:52Z",
    "cwe_ids": [
        "CWE-22"
    ],
    "severity": "HIGH",
    "nvd_published_at": "2026-02-19T23:16:25Z"
}

References

Affected packages

npm / openclaw

Package

Name: openclaw; View open source insights on deps.dev
Purl: pkg:npm/openclaw

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2026.2.14

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-8jpq-5h99-ff5r/GHSA-8jpq-5h99-ff5r.json"