Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions 2026.2.6 through 2026.3.24 contain a path traversal vulnerability in the Feishu extension resolveUploadInput function that bypasses file-system sandbox restrictions. Attackers can exploit improper path resolution during upload_image operations to read arbitrary files outside configured localRoots boundaries.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-41363 Path Traversal in OpenClaw Feishu Extension Resolveuploadinput Function 2026.2.6-2026.3.24 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41363
Post summary
The note announces a Path Traversal vulnerability (CVE‑2026‑41363) in the OpenClaw Feishu Extension’s Resolveuploadinput function, providing identifying details but no exploit or mitigation information.
⚡ New CVE Alert: CVE-2026-41363 📊 Severity: 5.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-41363 #CVE-2026-41363 #CVE #Medium #CyberSecurity #InfoSec https://t.co/AFxtMQ3svr
Post summary
The tweet merely announces CVE-2026-41363 with its severity score; it lacks technical, exploit, or remediation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |