CVE-2026-22171: Openclaw

Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days.

OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the Feishu media download flow where untrusted media keys are interpolated directly into temporary file paths in extensions/feishu/src/media.ts. An attacker who can control Feishu media key values returned to the client can use traversal segments to escape os.tmpdir() and write arbitrary files within the OpenClaw process permissions.

Affected products

• Openclaw Openclaw: before 2026.2.19 (fixed in 2026.2.19)

Published 2026-03-18. Last modified 2026-06-17.