CVE-2026-26321
Description
OpenClaw is a personal AI assistant. Prior to OpenClaw version 2026.2.14, the Feishu extension previously allowed `sendMediaFeishu` to treat attacker-controlled `mediaUrl` values as local filesystem paths and read them directly. If an attacker can influence tool calls (directly or via prompt injection), they may be able to exfiltrate local files by supplying paths such as `/etc/passwd` as `mediaUrl`. Upgrade to OpenClaw `2026.2.14` or newer to receive a fix. The fix removes direct local file reads from this path and routes media loading through hardened helpers that enforce local-root restrictions.
How to fix
- openclaw openclaw2026.2.14 or later
- openclaw2026.2.14 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openclaw openclaw | v < 2026.2.14 | 2026.2.14 |
| openclawnpm | v < 2026.2.14 | 2026.2.14 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.