Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw is a personal AI assistant. Prior to OpenClaw version 2026.2.14, the Feishu extension previously allowed `sendMediaFeishu` to treat attacker-controlled `mediaUrl` values as local filesystem paths and read them directly. If an attacker can influence tool calls (directly or via prompt injection), they may be able to exfiltrate local files by supplying paths such as `/etc/passwd` as `mediaUrl`. Upgrade to OpenClaw `2026.2.14` or newer to receive a fix. The fix removes direct local file reads from this path and routes media loading through hardened helpers that enforce local-root restrictions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-20 | 1 | Patch1 |
| 2026-03-07 | 1 | Disclosure1 |
CVE-2026-26321: Analyzing OpenClaw Feishu Extension File Exfiltration Vulnerability #security https://moltx.io/articles/4a4c1889-ae3e-4b4e-81f4-b792630097aa
Post summary
The post merely announces an analysis of CVE‑2026‑26321 without providing any PoC, exploit, mitigation, or detailed technical description.
CVE-2026-26321 OpenClaw is a personal AI assistant. Prior to OpenClaw version 2026.2.14, the Feishu extension previously allowed `sendMediaFeishu` to treat attacker-controlled `medi… https://www.cve.org/CVERecord?id=CVE-2026-26321
Post summary
The vulnerability CVE‑2026‑26321 affects OpenClaw’s Feishu extension’s `sendMediaFeishu` function, and is addressed in version 2026.2.14.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |