A path traversal vulnerability in the OpenClaw AI assistant allows unauthenticated attackers to exfiltrate sensitive local files from the host system.

This is a path traversal vulnerability (CWE-22) in the Feishu extension where the sendMediaFeishu function fails to sanitize the mediaUrl parameter. An unauthenticated attacker can supply arbitrary local file paths, such as /etc/passwd, to be read by the application.

The ability for an unauthenticated attacker to read arbitrary files from the filesystem poses a severe risk to confidentiality. This could lead to the exposure of configuration files, credentials, or sensitive system data, potentially facilitating further compromise of the infrastructure. With a CVSS score of 7.5, this high-severity flaw requires immediate remediation to prevent unauthorized data access.

Immediate Action: Update OpenClaw to version 2026.2.14 or newer to incorporate the hardened helper functions that enforce local-root restrictions.

Proactive Monitoring: Review application and system access logs for anomalous file path requests or attempts to access restricted system files via the Feishu extension.

Compensating Controls: If an immediate update is not feasible, restrict network access to the AI assistant to trusted IP ranges and monitor outbound traffic for signs of data exfiltration.

Public Exploit Available: No

Given the potential for unauthorized file access and the high CVSS severity, administrators should prioritize updating to version 2026.2.14 immediately. This update effectively closes the traversal vector by ensuring all media loading is routed through secure, restricted helpers, thereby neutralizing the primary risk to the host environment.