What is the CVSS score of CVE-2026-26321?

CVE-2026-26321 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of AI / ML are affected by CVE-2026-26321?

OpenClaw AI assistant users with the Feishu extension installed prior to version 2026.2.14 are at risk of unauthorized local file access through a path traversal vulnerability.. A patch is available.

How to fix or mitigate CVE-2026-26321?

Within 24 hours: Identify all OpenClaw installations with Feishu extension enabled and document current versions. Within 7 days: Upgrade all affected OpenClaw instances to version 2026.2.14 or later; disable the Feishu extension on systems that cannot be immediately patched. Within 30 days: Complete patch verification across all systems and conduct a file access audit to detect any unauthorized read attempts during the exposure window.

AI / ML CVE-2026-26321

HIGH

Path Traversal (CWE-22)

2026-02-19 security-advisories@github.com

GHSA-8jpq-5h99-ff5r

Path Traversal AI / ML Openclaw

7.5

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:03 vuln.today

Patch released

Feb 20, 2026 - 19:12 nvd

Patch available

CVE Published

Feb 19, 2026 - 23:16 nvd

HIGH 7.5

DescriptionGitHub Advisory

OpenClaw is a personal AI assistant. Prior to OpenClaw version 2026.2.14, the Feishu extension previously allowed sendMediaFeishu to treat attacker-controlled mediaUrl values as local filesystem paths and read them directly. If an attacker can influence tool calls (directly or via prompt injection), they may be able to exfiltrate local files by supplying paths such as /etc/passwd as mediaUrl. Upgrade to OpenClaw 2026.2.14 or newer to receive a fix. The fix removes direct local file reads from this path and routes media loading through hardened helpers that enforce local-root restrictions.

AnalysisAI

OpenClaw's Feishu extension prior to version 2026.2.14 improperly handles mediaUrl parameters by treating attacker-controlled values as local filesystem paths, enabling unauthorized file read access. An attacker who can influence tool calls through direct manipulation or prompt injection could exfiltrate sensitive files like /etc/passwd. This high-severity path traversal vulnerability (CWE-22) is resolved in version 2026.2.14 and later, which implements proper access controls and routes media loading through hardened helpers.

Technical ContextAI

Classified as CWE-22 (Path Traversal). Affects Openclaw. OpenClaw is a personal AI assistant. Prior to OpenClaw version 2026.2.14, the Feishu extension previously allowed sendMediaFeishu to treat attacker-controlled mediaUrl values as local filesystem paths and read them directly. If an attacker can influence tool calls (directly or via prompt injection), they may be able to exfiltrate local files by supplying paths such as /etc/passwd as mediaUrl. Upgrade to OpenClaw 2026.2.14 or newer to receive a fix. The fix removes direct local file rea

RemediationAI

A vendor patch is available — apply it immediately. Validate and sanitize file path inputs. Use allowlists. Restrict network access to the affected service where possible.