N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-j4xf-96qf-rx69

GHSA-j4xf-96qf-rx69: OpenClaw has a Feishu allowFrom authorization bypass via display-name collision

Summary

Feishu allowlist authorization could be bypassed by display-name collision.

Details

channels.feishu.allowFrom is documented as an ID-based allowlist (open_id list), but Feishu policy matching accepted mutable sender display names in the same namespace. An attacker could set a display name equal to an allowlisted ID string and pass authorization checks.

The fix enforces ID-only matching for Feishu allowlist checks, normalizes Feishu ID prefixes during comparison, and ignores mutable display names for authorization.

Impact

Deployments using Feishu allowlist-based authorization could incorrectly authorize non-allowlisted senders when a colliding display name was used.

Affected Packages / Versions

Package: openclaw (npm)
Latest published version at triage time: 2026.2.21-2
Affected range: <= 2026.2.21-2
Planned patched version: >= 2026.2.22

Fix Commit(s)

4ed87a667263ed2d422b9d5d5a5d326e099f92c7

Release Process Note

patched_versions is pre-set to the planned next release (>= 2026.2.22) so the advisory is ready to publish once that npm release is available.

OpenClaw thanks @jiseoung for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-j4xf-96qf-rx69

GHSA-j4xf-96qf-rx69:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.2.22	2026.2.22

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability, GHSA-j4xf-96qf-rx69, is an authorization bypass in OpenClaw's Feishu integration. The root cause was that the authorization logic considered a user's mutable display name (senderName) as a valid identifier for allowlist checks. An attacker could change their display name to match the user ID of an authorized user, which would cause the system to grant them access incorrectly.

The analysis of the patch commit 4ed87a667263ed2d422b9d5d5a5d326e099f92c7 reveals the fix. The core of the vulnerability was in the resolveFeishuAllowlistMatch function in extensions/feishu/src/policy.ts. Previously, this function used a generic utility resolveAllowlistMatchSimple which likely checked all provided sender identifiers, including the display name. The patch completely replaces the implementation of resolveFeishuAllowlistMatch to only use immutable IDs (senderId and the new senderIds parameter) for authorization, explicitly ignoring the senderName. The new test file policy.test.ts includes a specific test case for "display-name collision" which confirms this was the exact scenario being fixed.

The handleFeishuMessage function in extensions/feishu/src/bot.ts is the entry point that processes incoming messages and calls resolveFeishuAllowlistMatch for authorization. Therefore, both functions would appear in a runtime profile during an exploit attempt.

Vulnerable functions

resolveFeishuAllowlistMatch

extensions/feishu/src/policy.ts

This function is responsible for checking if a Feishu user is on an allowlist. The vulnerability existed because the previous implementation, which called `resolveAllowlistMatchSimple`, used the sender's mutable display name (`senderName`) for authorization checks. An attacker could set their display name to an ID present in the allowlist, thereby bypassing the authorization. The patch fixes this by implementing new logic that explicitly ignores the `senderName` and only uses immutable identifiers (`senderId` and `senderIds`) for the check.

handleFeishuMessage

extensions/feishu/src/bot.ts

This function is the primary handler for incoming Feishu messages. It extracts sender information from the message event, including the sender's ID and display name. It then calls `resolveFeishuAllowlistMatch` to determine if the sender is authorized. As this function passes the potentially malicious `senderName` to the vulnerable authorization function, it serves as the entry point for the exploit.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-j4xf-96qf-rx69: OpenClaw has a Feishu allowFrom authorization bypass via display-name collision

Summary

Details

Impact

Affected Packages / Versions

Fix Commit(s)

Release Process Note

GHSA-j4xf-96qf-rx69:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

GHSA-j4xf-96qf-rx69: OpenClaw has a Feishu allowFrom authorization bypass via display-name collision

Summary

Details

Impact

Affected Packages / Versions

Fix Commit(s)

Release Process Note

Technical Details

N/A

N/A

Basic Information

Basic Information

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI