GitHub Advisoryadvisory · npm

GHSA-x22m-j5qq-j49m OpenClaw has two SSRF via sendMediaFeishu and markdown image fetching in Feishu extension

HIGH Published 2026-02-18 Modified 2026-03-11 Official page ↗
Aliases
CVE-2026-28451
Ecosystem
npm
Packages
openclaw
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-918
Reviewed
2026-02-18

Affected packages

• npm openclaw: < 2026.2.14 → fixed in 2026.2.14

Description

Summary The Feishu extension could fetch attacker-controlled remote URLs in two paths without SSRF protections: • `sendMediaFeishu(mediaUrl)` • Feishu DocX markdown image URLs (write/append -> image processing) Affected versions • `= 2026.2.14` Impact If an attacker can influence tool calls (directly or via prompt injection), they may be able to trigger requests to internal services and re-upload the response as Feishu media. Remediation Upgrade to OpenClaw `2026.2.14` or newer. Notes The fix routes Feishu remote media fetching through hardened runtime helpers that enforce SSRF policies and size limits.

Related

Alias · CVE (1)

  • CVE-2026-28451 OpenClaw versions prior to 2026.2.14 contain server-side request forgery vulnerabilities in the Feishu extension that allow attackers to… vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References