GHSA-8jpq-5h99-ff5r: OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension

Summary

The Feishu extension in OpenClaw versions before 2026.2.14 let `sendMediaFeishu` treat attacker-controlled `mediaUrl` values as local filesystem paths and read them directly. An attacker who can influence tool calls, directly or through prompt injection, could exfiltrate local files such as `/etc/passwd`.

Mitigation

Upgrade to OpenClaw `2026.2.14` or newer. The fix, commit 5b4121d60, removes direct local file reads from this path and routes media loading through hardened helpers that enforce local-root restrictions.

Related items

• InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
• InfoHow to Turn AI Red Team Findings Into Runtime ControlsSimilar attack · Straiker Blog
• MediumDocker Sandboxes vulnerability lets AI agents access sensitive files outside their sandbox (CVE-2026-103916) | Endor LabsSimilar attack · Endor Labs Blog
• MediumFree the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak BundlesSimilar attack · Check Point Research
• InfoRight Tool, Wrong Parameters: Defending LLM Agents Against Parameter PoisoningSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)