Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the Feishu media download flow where untrusted media keys are interpolated directly into temporary file paths in extensions/feishu/src/media.ts. An attacker who can control Feishu media key values returned to the client can use traversal segments to escape os.tmpdir() and write arbitrary files within the OpenClaw process permissions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-18 | 4 | Disclosure3General1 |
| 2026-03-19 | 1 | Disclosure1 |
⚡ New CVE Alert: CVE-2026-22171 📊 Severity: 8.2 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-22171 #CVE-2026-22171 #CVE #High #CyberSecurity #InfoSec https://t.co/uYWwjnaJLU
Post summary
A new CVE-2026‑22171 has been announced with a severity score of 8.2, affecting multiple unspecified products. No PoC, exploit, or patch details are provided.
🟠 CVE-2026-22171 - High OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the Feishu media download flow where untrusted media keys are interpolated directly into temporary file paths in... https://www.thehackerwire.com/vulnerability/CVE-2026-22171/ https://t.co/7uuiwGS7bL
Post summary
The tweet announces a high‑severity path traversal vulnerability (CVE-2026-22171) affecting OpenClaw versions before 2026.2.19, providing technical details but no PoC, exploitation or patch information.
CVE-2026-22171 Path Traversal in OpenClaw Feishu Media Download Flow Before Version 2026.2.19 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-22171
Post summary
The text discloses a path‑traversal vulnerability (CVE‑2026‑22171) affecting OpenClaw Feishu Media Download Flow before version 2026.2.19, with no additional PoC, patch, or exploitation details provided.
CVE-2026-22171 OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the Feishu media download flow where untrusted media keys are interpolated directly int… https://www.cve.org/CVERecord?id=CVE-2026-22171
Post summary
The text announces a path traversal vulnerability in OpenClaw prior to version 2026.2.19, with no evidence of exploitation, PoC, or patch details.
CVE Alert: CVE-2026-22171 - OpenClaw - OpenClaw - https://www.redpacketsecurity.com/cve-alert-cve-2026-22171-openclaw-openclaw/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-22171 #openclaw #
Post summary
The post offers a link to a CVE alert for CVE-2026-22171 regarding OpenClaw, but provides no further technical or operational details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |