OpenClaw anfällig für Path Traversal in Feishu Media Temp-File Naming erlaubt Schreibzugriffe außerhalb von os.tmpdir()

The core of the vulnerability lies in OpenClaw's handling of Feishu media keys during file downloads. The extensions/feishu/src/media.ts file directly interpolates these keys into temporary file paths without proper sanitization. An attacker who can manipulate the imageKey or fileKey values returned by the Feishu service can inject path traversal sequences (e.g., ../..) into the temporary file path. This allows them to bypass the intended temporary directory (os.tmpdir()) and write files to arbitrary locations accessible by the OpenClaw process. The impact is limited to the process's file permissions, but could still lead to data corruption, privilege escalation within the OpenClaw environment, or denial of service.

Organizations using OpenClaw for collaborative knowledge management, particularly those integrated with Feishu for media sharing, are at risk. Shared hosting environments where OpenClaw is deployed alongside other applications may also be vulnerable if the attacker can compromise another application and leverage it to manipulate Feishu media keys.

• nodejs: Monitor OpenClaw logs for requests containing unusual characters in the imageKey or fileKey parameters. Use grep to search for patterns like ../ or ..\ in request URLs.

grep 'imageKey=.*\.\./' /var/log/openclaw/access.log
grep 'fileKey=.*\.\./' /var/log/openclaw/access.log

• generic web: Examine access logs for requests to the media download endpoint with suspicious query parameters. Use curl to test the endpoint with crafted parameters.

curl 'https://your-openclaw-instance/download?imageKey=../../../../etc/passwd' -s

1. 2026-03-03Disclosure

   disclosure

2. 2026-03-03Patch

   patch

1. Reserviert2026-01-06
2. Veröffentlicht2026-03-03
3. Geändert2026-03-19
4. EPSS aktualisiert2026-03-25

The primary mitigation is to upgrade OpenClaw to version 2026.2.19 or later, which includes the fix for this vulnerability. If an immediate upgrade is not possible, consider implementing a temporary workaround by validating and sanitizing the Feishu media keys before they are used in file path construction. This could involve a whitelist of allowed characters or a regular expression to prevent traversal sequences. Additionally, monitor OpenClaw's logs for any unusual file write activity, particularly attempts to write files outside the expected temporary directory. After upgrading, confirm the fix by attempting a file download with a crafted Feishu media key containing traversal sequences; the download should fail with an error.