CVE-2026-62188: Openclaw Feishu Auth Bypass Vulnerability

CVE-2026-62188 Overview

CVE-2026-62188 is an incorrect authorization vulnerability [CWE-863] affecting OpenClaw @openclaw/feishu versions 2026.6.6 and earlier. The Feishu permission tools fail to honor per-account disablement settings. When the affected feature is enabled and reachable, a lower-trust caller or configured input path can perform actions that should have required stronger authorization or policy checks. The issue has been fixed in version 2026.6.9. The vulnerability is exploitable over the network with low attack complexity and requires only low privileges, making it accessible to authenticated but under-privileged callers.

Critical Impact
A low-privileged caller can bypass per-account disablement controls in the Feishu permission tools to execute actions restricted by policy, resulting in high confidentiality and integrity impact.

Affected Products

OpenClaw @openclaw/feishu versions 2026.6.6 and earlier (Node.js)
Deployments where the Feishu permission tools feature is enabled and network-reachable
Environments relying on per-account disablement as an authorization control

Discovery Timeline

2026-07-13 - CVE-2026-62188 published to NVD
2026-07-15 - Last updated in NVD database

Technical Details for CVE-2026-62188

Vulnerability Analysis

The vulnerability resides in the @openclaw/feishu Node.js package, which provides Feishu (Lark) permission tooling. The permission tools do not consistently evaluate per-account disablement settings before dispatching actions. As a result, actions that should be gated by an account-level disable flag or stronger policy check are executed for callers that should not have access.

Because the authorization decision is incomplete, a lower-trust caller with valid low-level credentials can invoke tool functions restricted by policy. The impact is scoped to confidentiality and integrity of resources the tool exposes; availability is not affected. The advisory does not indicate exploitation in the wild, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. The EPSS score is 0.213%.

Root Cause

The root cause is an incorrect authorization check [CWE-863] within the Feishu permission tools. Per-account disablement settings are configured but not enforced on every code path that invokes protected actions. The authorization layer trusts the presence of a low-privilege credential without cross-checking the account-level policy state, allowing calls that should be denied.

Attack Vector

Exploitation is network-based and requires low privileges. An attacker with a valid low-trust account, or control over a configured input path that reaches the vulnerable feature, invokes a Feishu permission tool operation. Because the disablement check is skipped or evaluated incorrectly, the tool performs the requested action against the target resource. No user interaction is required. Refer to the GitHub Security Advisory GHSA-w8wf-3qvj-6xqf and the VulnCheck Advisory for technical details.

Detection Methods for CVE-2026-62188

Indicators of Compromise

Feishu permission tool invocations originating from accounts marked as disabled or restricted in policy configuration
Successful actions on Feishu resources by principals lacking documented authorization
Anomalous API calls to @openclaw/feishu tool endpoints from low-privilege service identities

Detection Strategies

Inventory Node.js dependencies for @openclaw/feishu at versions <= 2026.6.6 using software composition analysis
Correlate Feishu audit logs with local per-account disablement configuration to surface actions that should have been blocked
Alert on tool invocations that succeed despite a policy state indicating the caller should be denied

Monitoring Recommendations

Enable verbose audit logging on Feishu permission tool endpoints and forward events to a centralized log platform
Monitor for privilege discrepancies between the effective action performed and the caller's documented authorization level
Track deployment versions of @openclaw/feishu and alert when vulnerable versions are reintroduced through dependency updates

How to Mitigate CVE-2026-62188

Immediate Actions Required

Upgrade @openclaw/feishu to version 2026.6.9 or later across all affected deployments
Audit Feishu action logs for the period during which the vulnerable version was deployed and investigate calls from disabled or restricted accounts
Rotate credentials and tokens for any account that may have invoked unauthorized actions

Patch Information

The maintainers fixed the issue in @openclaw/feishu version 2026.6.9. See the GitHub Security Advisory GHSA-w8wf-3qvj-6xqf for release notes and the VulnCheck Advisory for additional context.

Workarounds

Disable or make the Feishu permission tools feature network-unreachable until the patched version is deployed
Restrict network access to the tool endpoints using allowlists limited to trusted service identities
Enforce authorization checks at an upstream gateway or proxy where per-account disablement can be validated independently

bash

# Upgrade @openclaw/feishu to the patched version
npm install @openclaw/feishu@2026.6.9

# Verify the installed version
npm ls @openclaw/feishu