CVE-2026-28451 - Vulnerability Analysis

Overview

OpenClaw < 2026.2.14 contains a server-side request forgery caused by insufficient SSRF protections in the Feishu extension's sendMediaFeishu function and markdown image processing, letting attackers fetch attacker-controlled URLs and re-upload responses as media, exploit requires attacker to manipulate tool calls or prompt injection.

Severity & Score

Impact

Attackers can make unauthorized requests to internal services and re-upload responses, potentially leading to data exposure or further attacks.

Mitigation

Update to version 2026.2.14 or later.

References

• https://www.vulncheck.com/advisories/openclaw-ssrf-via-feishu-extension-media-fetching
• https://github.com/openclaw/openclaw/commit/5b4121d6011a48c71e747e3c18197f180b872c5d
• https://github.com/openclaw/openclaw/security/advisories/GHSA-x22m-j5qq-j49m

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 7, 2026

🟠 CVE-2026-28451 - High (8.3) OpenClaw versions prior to 2026.2.14 contain server-side request forgery vulnerabilities in the Feishu extension that allow attackers to fetch attacker-controlled remote URLs without SSRF protections via sendMediaFeishu function and markdown image... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-28451/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner