7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-26321

CVE-2026-26321: OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension

Summary

The Feishu extension previously allowed sendMediaFeishu to treat attacker-controlled mediaUrl values as local filesystem paths and read them directly.

Affected versions

< 2026.2.14

Patched versions

>= 2026.2.14

Impact

If an attacker can influence tool calls (directly or via prompt injection), they may be able to exfiltrate local files by supplying paths such as /etc/passwd as mediaUrl.

Remediation

Upgrade to OpenClaw 2026.2.14 or newer.

Notes

The fix removes direct local file reads from this path and routes media loading through hardened helpers that enforce local-root restrictions.

Fix commit 5b4121d60 confirmed on main and in v2026.2.14. Upgrade to openclaw >= 2026.2.14.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-26321

CVE-2026-26321:

7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.2.14	2026.2.14

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a local file disclosure within the Feishu extension of OpenClaw, as described in GHSA-8jpq-5h99-ff5r. The root cause lies in the sendMediaFeishu function located in extensions/feishu/src/media.ts. This function was designed to handle both remote URLs and local file paths for media attachments.

Analysis of the fixing commit 5b4121d6011a48c71e747e3c18197f180b872c5d reveals that sendMediaFeishu used a helper function, isLocalPath, to distinguish between URLs and local paths. The logic in isLocalPath was flawed; it would incorrectly identify certain strings as local paths, for example, when it failed to parse a string as a valid URL. When isLocalPath returned true, sendMediaFeishu would proceed to read the provided path from the local filesystem using fs.readFileSync. This allowed an attacker to supply a path to a sensitive file (e.g., /etc/passwd) as the mediaUrl, causing the application to read and exfiltrate the file's contents.

The patch addresses this by completely removing the isLocalPath function and the corresponding file-reading logic from sendMediaFeishu. Instead, all media is now fetched through a hardened helper function, getFeishuRuntime().media.loadWebMedia, which is designed to prevent access to local files and internal network resources.

Additionally, the same commit hardened the downloadImage function in extensions/feishu/src/docx.ts, which was vulnerable to SSRF. While the primary reported vulnerability was LFD in sendMediaFeishu, this related fix indicates a broader effort to secure media handling in the extension.

Vulnerable functions

sendMediaFeishu

extensions/feishu/src/media.ts

The function `sendMediaFeishu` was vulnerable to local file disclosure. It used an insecure helper function `isLocalPath` to determine if the `mediaUrl` parameter was a local file path. If the check was positive, the function would read the file from the filesystem using `fs.readFileSync` and send its contents. This allowed an attacker who could control the `mediaUrl` parameter to read arbitrary files from the server. The patch removes this logic and replaces it with a call to a hardened media loading function.

isLocalPath

extensions/feishu/src/media.ts

This helper function, used by `sendMediaFeishu`, was responsible for identifying if a given string was a local path. Its logic was too permissive and would incorrectly classify certain inputs as local paths (e.g., if URL parsing failed), leading directly to the local file disclosure vulnerability. The function was completely removed in the patch.

downloadImage

extensions/feishu/src/docx.ts

This function was vulnerable to Server-Side Request Forgery (SSRF) because it used `fetch` to download an image from a user-provided URL without any validation. An attacker could provide a URL pointing to an internal service or a local file, potentially exfiltrating data or interacting with internal systems. The fix replaces the direct `fetch` call with a hardened media fetching utility.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

7.5

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2026-26321: OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension

Summary

Affected versions

Patched versions

Impact

Remediation

Notes

CVE-2026-26321:

7.5

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Technical Details

CVE-2026-26321: OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension

Summary

Affected versions

Patched versions

Impact

Remediation

Notes

7.5

7.5

Basic Information

Basic Information

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI