GHSA-x22m-j5qq-j49m: OpenClaw has two SSRF via sendMediaFeishu and markdown image fetching in Feishu extension

Summary

The OpenClaw Feishu extension could fetch attacker-controlled remote URLs without SSRF protections, through sendMediaFeishu(mediaUrl) and through markdown image URLs processed during Feishu DocX write or append operations. Affected versions are below 2026.2.14. An attacker who can influence tool calls, directly or via prompt injection, may trigger requests to internal services and re-upload the responses as Feishu media.

Mitigation

Upgrade to OpenClaw 2026.2.14 or newer. The fix routes Feishu remote media fetching through hardened runtime helpers that enforce SSRF policies and size limits.

Related items

• InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
• InfoHow to Turn AI Red Team Findings Into Runtime ControlsSimilar attack · Straiker Blog
• MediumDocker Sandboxes vulnerability lets AI agents access sensitive files outside their sandbox (CVE-2026-103916) | Endor LabsSimilar attack · Endor Labs Blog
• MediumFree the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak BundlesSimilar attack · Check Point Research
• InfoRight Tool, Wrong Parameters: Defending LLM Agents Against Parameter PoisoningSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)