Openclaw cli: OpenClaw: Feishu extension resolveUploadInput bypasses file-system sandbox and allows arbitrary file reads via upload_image (CVE-2026-41363)

The Feishu extension in Openclaw CLI contains a vulnerability in the upload path resolution logic that permits reading files outside the intended localRoots sandbox. This allows an attacker constrained to certain workspace or localRoots paths to exfiltrate arbitrary files from the host by exploiting the Feishu upload_image functionality. The vulnerability is located in the 'extensions/feishu/src/docx.ts' component. The issue was fixed by commit 764394c78b, which enforces the localRoots sandbox on Feishu docx upload file reads. Versions from 2026.2.6 up to and including 2026.3.24 are affected, with the fix included starting in 2026.3.28.

An attacker with limited permissions constrained to workspace or localRoots paths can bypass sandbox restrictions and read arbitrary files on the host system by leveraging Feishu upload actions. This results in confidentiality loss of host files. There is no indication of integrity or availability impact. The CVSS v3.1 base score is 5.3 (medium severity), reflecting network attack vector, high attack complexity, low privileges required, no user interaction, and impact to confidentiality only.

A patch is available and should be applied. The vulnerability is fixed in Openclaw CLI version 2026.3.28 and later. Users should upgrade to version 2026.3.28 or newer to remediate this issue. No additional mitigation steps are indicated by the vendor advisory.