CVE-2026-41363: Openclaw Path Traversal Vulnerability

CVE-2026-41363 Overview

CVE-2026-41363 is a path traversal vulnerability affecting OpenClaw versions 2026.2.6 through 2026.3.24. The vulnerability exists in the Feishu extension's resolveUploadInput function, which fails to properly validate file paths during upload_image operations. This flaw allows authenticated attackers to bypass file-system sandbox restrictions and read arbitrary files outside the configured localRoots boundaries.

Critical Impact
Attackers with low-privilege access can exploit improper path resolution to read sensitive files from the server, potentially exposing configuration files, credentials, and other confidential data.

Affected Products

OpenClaw versions 2026.2.6 through 2026.3.24
OpenClaw for Node.js environments
Systems utilizing the Feishu extension upload functionality

Discovery Timeline

2026-04-28 - CVE-2026-41363 published to NVD
2026-04-28 - Last updated in NVD database

Technical Details for CVE-2026-41363

Vulnerability Analysis

This path traversal vulnerability (CWE-22) stems from insufficient validation of user-supplied file paths in the Feishu extension's image upload functionality. When processing upload_image operations, the resolveUploadInput function fails to properly sanitize path components, allowing attackers to use directory traversal sequences to escape the intended localRoots sandbox.

The attack requires network access and low-privilege authentication. While the attack complexity is considered high, successful exploitation results in a complete compromise of file confidentiality—attackers can read any file accessible to the application process, though they cannot modify files or cause service disruption.

Root Cause

The root cause lies in improper path resolution within the resolveUploadInput function. The function accepts user-controlled input specifying the file path for upload operations but fails to canonicalize the path or validate that the resolved path remains within the designated localRoots directory boundaries. This allows traversal sequences like ../ to navigate outside the sandbox.

Attack Vector

The vulnerability is exploitable over the network by authenticated users with low privileges. An attacker crafts a malicious request to the upload_image endpoint, supplying a path parameter containing directory traversal sequences. The Feishu extension processes this input without adequate validation, resolving the path to a location outside the intended sandbox and returning the contents of arbitrary files to the attacker.

The vulnerability mechanism involves path manipulation through the upload_image parameter in the Feishu extension. When a crafted path containing traversal sequences such as ../ is submitted, the resolveUploadInput function resolves the path without proper canonicalization, allowing access to files outside the localRoots boundaries. For detailed technical analysis, refer to the GitHub Security Advisory.

Detection Methods for CVE-2026-41363

Indicators of Compromise

HTTP requests to the Feishu extension endpoints containing path traversal sequences (../, ..%2f, %2e%2e/)
Unusual file access patterns in application logs showing requests for files outside localRoots directories
Error messages indicating attempts to access system files like /etc/passwd or configuration files
Anomalous authenticated user activity targeting upload functionality

Detection Strategies

Implement web application firewall (WAF) rules to detect and block path traversal patterns in request parameters
Monitor application logs for resolveUploadInput function errors or unexpected file path resolutions
Deploy endpoint detection rules to identify file access attempts outside configured sandbox boundaries
Use SentinelOne Singularity Platform to detect anomalous file read operations targeting sensitive system paths

Monitoring Recommendations

Enable verbose logging for the Feishu extension to capture all upload_image request parameters
Configure alerts for any file access attempts targeting paths containing ../ sequences
Monitor for reconnaissance patterns where attackers probe for accessible file paths
Implement file integrity monitoring on sensitive configuration files that could be targeted

How to Mitigate CVE-2026-41363

Immediate Actions Required

Upgrade OpenClaw to a patched version beyond 2026.3.24 immediately
Review access logs for evidence of exploitation attempts targeting the Feishu extension
Restrict network access to the affected upload endpoints where possible
Implement additional input validation at the network perimeter using WAF rules

Patch Information

The vendor has released a security advisory addressing this vulnerability. Administrators should upgrade to a patched version of OpenClaw as documented in the GitHub Security Advisory. Additional technical details are available from the VulnCheck Advisory.

Workarounds

Disable the Feishu extension if not required for business operations until patching is complete
Implement strict localRoots path validation at the application gateway level
Use operating system-level file permissions to restrict the application's file access scope
Deploy network segmentation to limit which systems can access the vulnerable endpoints

bash

# Example: Restrict Feishu extension access via reverse proxy configuration
# Add to nginx configuration to block path traversal attempts
location /feishu/upload {
    # Block requests containing path traversal sequences
    if ($request_uri ~* "\.\.") {
        return 403;
    }
    # Additional validation can be implemented here
    proxy_pass http://openclaw_backend;
}