Openclaw cli: OpenClaw: Feishu docx upload_file/upload_image Bypasses Workspace-Only Filesystem Policy (GHSA-qf48-qfv4-jjm9 Incomplete Fix) (CVE-2026-41911)
Description
A vulnerability in the openclaw npm package (versions >=2026.1.29 and <2026.4.8) allows Feishu document uploads to bypass the workspace-only filesystem policy. This enables reading of local files outside the intended restricted workspace boundary when processing docx upload blocks. The issue affects the OpenClaw local assistant under its trust model and does not assume multi-tenant service boundaries. The vulnerability has been patched in version 2026.4.8.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The openclaw CLI tool had a security flaw (CVE-2026-41911) where the Feishu docx upload_file and upload_image functionality could bypass the workspace-only filesystem policy. This allowed local file reads outside the restricted workspace during docx upload processing. The vulnerability affects openclaw npm package versions from 2026.1.29 up to but not including 2026.4.8. The issue was fixed in commit d7c3210cd6f5fdfdc1beff4c9541673e814354d5 and released in version 2026.4.8. The fix was verified with regression tests targeting the affected security boundary.
Potential Impact
An attacker or user leveraging the Feishu docx upload functionality could read local files outside the designated workspace-only filesystem policy, potentially exposing sensitive local data. The impact is limited to the local trust model of OpenClaw and does not extend to multi-tenant or cloud service boundaries.
Mitigation Recommendations
A patch is available and should be applied by upgrading openclaw to version 2026.4.8 or later. The fix has been verified and regression tested. Users should update to the patched version to mitigate this vulnerability.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-41911
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 4.0
Threat ID: 6ac2459a12601ec6a3165d4a
Added to database: 10/04/2026, 12:24:58 UTC
Last enriched: 10/04/2026, 12:44:44 UTC
Last updated: 10/04/2026, 16:08:38 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.