Openclaw cli: OpenClaw vulnerable to path traversal in Feishu media temp-file naming allows writes outside os.tmpdir() (CVE-2026-22171)

OpenClaw’s Feishu media download flow used untrusted Feishu media keys (imageKey/fileKey) directly in temporary file path construction, enabling path traversal that escapes the os.tmpdir() directory. This allows arbitrary file writes within the OpenClaw process's file permissions if an attacker can influence the media key values. The vulnerability affects openclaw npm package versions up to 2026.2.17 and is fixed in 2026.2.19. The fix includes removing key-derived temp-file naming, isolating writeFile calls in per-download temp directories with deterministic cleanup, enforcing trust-boundary validation on Feishu keys, and adding repository guard tests.

An attacker who can control Feishu media key values returned to the client can cause OpenClaw to write files outside the intended temporary directory. This arbitrary file write is limited to the permissions of the OpenClaw process and could lead to overwriting or creating files in unintended locations, potentially impacting system integrity or security depending on deployment context.

A fix is available in openclaw version 2026.2.19. Users should upgrade to this version or later to remediate the vulnerability. The fix removes unsafe temp-file naming based on untrusted keys, adds validation of Feishu keys, isolates file writes in safe temporary directories, and includes tests to prevent recurrence.