~ / search / GHSA-qf48-qfv4-jjm9

GHSA-qf48-qfv4-jjm9

OpenClaw: Feishu extension resolveUploadInput bypasses file-system sandbox and allows arbitrary file reads via upload_image

Source: GitHub Advisory Database (reviewed) Moderate CVE-2026-41363

Packages

EcosystemPackageAffectedFixed in
npm openclaw >= 2026.2.6, < 2026.3.28 2026.3.28

Details

As written in the advisory (Markdown source, shown as plain text).

## Summary Feishu upload path resolution could read files outside the configured localRoots sandbox before handing them to the upload path. ## Impact A tool caller constrained to workspace or localRoots paths could exfiltrate arbitrary host files through Feishu upload actions. ## Affected Component `extensions/feishu/src/docx.ts` ## Fixed Versions - Affected: `>= 2026.2.6, <= 2026.3.24` - Patched: `>= 2026.3.28` - Latest stable `2026.3.28` contains the fix. ## Fix Fixed by commit `764394c78b` (`fix: enforce localRoots sandbox on Feishu docx upload file reads`).

References

External links from the advisory. They lead to third-party sites.