Security Advisory

CVE-2026-41363

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-27 23:24:26

Last updated 2026-05-25 23:42:15

Assigner VulnCheck

CVSS score 6.0

State PUBLISHED

Description

OpenClaw versions 2026.2.6 through 2026.3.24 contain a path traversal vulnerability in the Feishu extension resolveUploadInput function that bypasses file-system sandbox restrictions. Attackers can exploit improper path resolution during upload_image operations to read arbitrary files outside configured localRoots boundaries.

← Browse all CVEs View on cve.org ↗