OpenClaw Feishu extension allows local file disclosure via sendMediaFeishu
OpenClaw's Feishu extension contained a local file disclosure vulnerability allowing attackers to read arbitrary local files via the sendMediaFeishu function. The vulnerability affected versions before 2026.2.14 and was patched by hardening media URL fetching.
What happened
The Feishu extension in OpenClaw versions before 2026.2.14 allowed the sendMediaFeishu function to treat attacker-controlled mediaUrl values as local filesystem paths and read them directly.
An attacker could influence tool calls directly or via prompt injection to exfiltrate local files by supplying paths such as /etc/passwd as mediaUrl.
The fix removes direct local file reads from this path and routes media loading through hardened helpers that enforce local-root restrictions, confirmed in commit 5b4121d in version 2026.2.14.
Reported impact
The vulnerability allowed unauthorised access to local files if an attacker could control tool calls or inject prompts into the system.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.