Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/09 5:36 p.m.18 views

OpenClaw: Feishu docx upload_file/upload_image Bypasses Workspace-Only Filesystem Policy (GHSA-qf48-qfv4-jjm9 Incomplete Fix)

Impact Feishu docx uploadfile/uploadimage Bypasses Workspace-Only Filesystem Policy GHSA-qf48-qfv4-jjm9 Incomplete Fix. Feishu document uploads could read local files outside the workspace-only file policy when processing docx upload blocks. OpenClaw is a user-controlled local assistant. This...

6.5CVSS5.9AI score0.00326EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder