MediumVulnerabilityLLM-specific
CVE-2026-28451: OpenClaw server-side request forgery in Feishu extension media fetching
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-28451
- Published
- Record updated
- Affected
- openclaw < 2026.2.14
- Fixed in
- 2026.2.14
- released February 14, 2026, 18 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.3%
Summary
CVE-2026-28451 affects OpenClaw versions prior to 2026.2.14 in the Feishu extension. Attackers can make the sendMediaFeishu function and markdown image processing fetch attacker-controlled remote URLs without SSRF protections, directly or through prompt injection that influences tool calls. The requests can reach internal services, and the responses can be re-uploaded as Feishu media. The VulnCheck CVSS 4.0 score is 6.3 (MEDIUM), and NVD has not yet provided an assessment.
Mitigation
Fixed in 2026.2.14 (versions prior to 2026.2.14 are affected). The source links the fixing commit 5b4121d6011a48c71e747e3c18197f180b872c5d and the GHSA-x22m-j5qq-j49m advisory.
Related items
- MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
- InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
- InfoHow to Turn AI Red Team Findings Into Runtime ControlsSimilar attack · Straiker Blog
- MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
- HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database