GHSA-3wqp-prf6-2m72: OpenClaw: Feishu dynamic-agent bindings could miss configWrites enforcement
OpenClaw versions prior to 2026.5.6 have a vulnerability in the Feishu dynamic-agent bindings feature where configWrites enforcement may be bypassed. This allows a Feishu sender using dynamic-agent binding behavior to create or update bindings without respecting configured config-write controls. The vulnerability does not affect OpenClaw's trusted-operator model and requires the affected feature to be enabled and reachable. The impact depends on the operator's configuration and whether lower-trust inputs can access this feature. The issue is fixed in version 2026.5.6.
AI Analysis
Technical Summary
The vulnerability in OpenClaw's Feishu dynamic-agent bindings allows bypassing of configWrites enforcement, enabling a Feishu sender to create or update bindings without honoring configured config-write controls. This could lead to unintended changes in sender-agent binding state when the feature is enabled and accessible. The vulnerability does not compromise the trusted-operator model of OpenClaw and is scoped to the specific feature and configuration. The first stable patched version addressing this issue is 2026.5.6.
Potential Impact
The vulnerability can cause changes to sender-agent binding states beyond intended policy controls, potentially allowing unauthorized modifications if lower-trust inputs reach the affected feature. There is no impact on confidentiality or availability, and the overall severity is low. The practical impact depends on the operator's configuration and usage of the affected feature.
Mitigation Recommendations
Disable sender-created Feishu dynamic-agent bindings until the system is updated to version 2026.5.6 or later if this feature is not needed. Additionally, narrow channel and tool allowlists, avoid sharing a Gateway between mutually untrusted users, and disable the affected feature when not required. These mitigations reduce the risk of unauthorized binding changes.
GHSA-3wqp-prf6-2m72: OpenClaw: Feishu dynamic-agent bindings could miss configWrites enforcement
Description
OpenClaw versions prior to 2026.5.6 have a vulnerability in the Feishu dynamic-agent bindings feature where configWrites enforcement may be bypassed. This allows a Feishu sender using dynamic-agent binding behavior to create or update bindings without respecting configured config-write controls. The vulnerability does not affect OpenClaw's trusted-operator model and requires the affected feature to be enabled and reachable. The impact depends on the operator's configuration and whether lower-trust inputs can access this feature. The issue is fixed in version 2026.5.6.
CVSS v3.1
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in OpenClaw's Feishu dynamic-agent bindings allows bypassing of configWrites enforcement, enabling a Feishu sender to create or update bindings without honoring configured config-write controls. This could lead to unintended changes in sender-agent binding state when the feature is enabled and accessible. The vulnerability does not compromise the trusted-operator model of OpenClaw and is scoped to the specific feature and configuration. The first stable patched version addressing this issue is 2026.5.6.
Potential Impact
The vulnerability can cause changes to sender-agent binding states beyond intended policy controls, potentially allowing unauthorized modifications if lower-trust inputs reach the affected feature. There is no impact on confidentiality or availability, and the overall severity is low. The practical impact depends on the operator's configuration and usage of the affected feature.
Mitigation Recommendations
Disable sender-created Feishu dynamic-agent bindings until the system is updated to version 2026.5.6 or later if this feature is not needed. Additionally, narrow channel and tool allowlists, avoid sharing a Gateway between mutually untrusted users, and disable the affected feature when not required. These mitigations reduce the risk of unauthorized binding changes.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-3wqp-prf6-2m72
- Osv Schema Version
- 1.4.0
- Aliases
- []
- Ecosystems
- ["npm"]
- Database Specific Severity
- LOW
- Cvss Version
- 3.1
Threat ID: 6a46ecc627e9c7971943d985
Added to database: 07/02/2026, 22:57:10 UTC
Last enriched: 07/02/2026, 23:19:30 UTC
Last updated: 07/03/2026, 03:31:15 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.