{"data":{"id":"c28145ba-fe83-4b1f-af33-ea723eb41e59","title":"GHSA-x22m-j5qq-j49m: OpenClaw has two SSRF via sendMediaFeishu and markdown image fetching in Feishu extension","summary":"The OpenClaw Feishu extension could fetch attacker-controlled remote URLs without SSRF protections, through sendMediaFeishu(mediaUrl) and through markdown image URLs processed during Feishu DocX write or append operations. Affected versions are below 2026.2.14. An attacker who can influence tool calls, directly or via prompt injection, may trigger requests to internal services and re-upload the responses as Feishu media.","solution":"Upgrade to OpenClaw 2026.2.14 or newer. The fix routes Feishu remote media fetching through hardened runtime helpers that enforce SSRF policies and size limits.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-x22m-j5qq-j49m","publishedAt":"2026-02-18T17:45:12.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":["openclaw@< 2026.2.14 (fixed: 2026.2.14)"],"affectedPackageNames":["openclaw"],"affectedPackageRefs":["npm:openclaw"],"affectedVendors":[],"affectedVendorsRaw":["OpenClaw","Feishu"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-x22m-j5qq-j49m"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":"2026-02-15T02:59:48.267Z","daysToFix":-3,"fixCheckedAt":"2026-10-29T21:40:55.275Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"npm","name":"openclaw","fixedVersion":"2026.2.14","matchedVersion":"2026.2.14","fixReleasedAt":"2026-02-15T02:59:48.267Z","daysToFix":-3,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:40:55.128Z"}]}}