Openclaw Feishu
4 CVEs affecting Openclaw Feishu. Latest disclosed: 2026-09-26. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-62188 | High | 8.1 | 2026-07-13 | OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in which the Feishu permission tools could ignore per-… |
CVE-2026-62187 | High | 8.1 | 2026-07-13 | OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input p… |
CVE-2026-100540 | Medium | 6.8 | 2026-09-26 | OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabled before selecting it for model tool operations. Attackers can… |
CVE-2026-100582 | Medium | 6.5 | 2026-09-26 | OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat) before 2026.8.1 do not enforce the configured channe… |