PT-2026-57890 · Unknown · Openclaw @Openclaw/Feishu

Rex Liu

·

CVE-2026-62188

·

Published

2026-07-13

·

Updated

2026-09-03

CVSS v4.0

8.6

High

VectorAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions OpenClaw @openclaw/feishu versions prior to 2026.6.9
Description An incorrect authorization issue exists where Feishu permission tools may ignore per-account disablement settings. If the affected feature is enabled and reachable, a lower-trust caller or configured input path can execute actions that normally require stronger authorization or policy checks.
Recommendations Update OpenClaw @openclaw/feishu to version 2026.6.9.

Exploit

Fix

Incorrect Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-62188
GHSA-W8WF-3QVJ-6XQF

Affected Products

Openclaw @Openclaw/Feishu