2 matches found
EUVD-2026-43565
OpenClaw Feishu tools npm package @openclaw/feishu in versions = 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform actions that should have required a stronger authorization or policy check, resulting in unauthorized operations. The issue...
8.6CVSS6.1AI score0.00213EPSS
SaveExploits0References3
CVE-2026-62187 OpenClaw < 2026.6.9 Feishu tools Authorization Bypass
OpenClaw Feishu tools npm package @openclaw/feishu in versions = 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform actions that should have required a stronger authorization or policy check, resulting in unauthorized operations. The issue...
8.6CVSS0.00213EPSS
SaveExploits0References2
20