PT-2026-23529 · Openclaw+1 · Openclaw+1

Peng Zhou · Published 2026-02-18 · Updated 2026-03-07 · CVE-2026-28451

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.14

Description The Feishu extension in OpenClaw is susceptible to server-side request forgery (SSRF). This allows attackers to retrieve content from attacker-controlled remote URLs without proper SSRF protections. The issue exists in two areas: the sendMediaFeishu(mediaUrl) function and the processing of markdown images within Feishu DocX files. Attackers can manipulate tool calls, either directly or through prompt injection, to initiate requests to internal services and then re-upload the responses as Feishu media.

Recommendations Upgrade to OpenClaw version 2026.2.14 or newer.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-28451

GHSA-X22M-J5QQ-J49M

Affected Products

Feishu

Openclaw

References · 11

• https://github.com/openclaw/openclaw/security/advisories/GHSA-x22m-j5qq-j49m · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/5b4121d6011a48c71e747e3c18197f180b872c5d · Patch
• https://osv.dev/vulnerability/GHSA-x22m-j5qq-j49m · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-28451 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28451 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.14 · Note
• https://github.com/openclaw/openclaw/pull/16285 · Note
• https://vulncheck.com/advisories/openclaw-ssrf-via-feishu-extension-media-fetching · Note
• https://twitter.com/CVEnew/status/2030385192704098348 · Twitter Post
• https://twitter.com/TheHackerWire/status/2030253704864317485 · Twitter Post