Known Vulnerabilities for Feishu by Openclaw
Listed below are 10 of the newest known vulnerabilities associated with "Feishu" by "Openclaw".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-112265 json | LangBot through 4.11.0 contains a missing authenticity verification vulnerability that allows unauthenticated attackers to in... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-108883 json | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any auth... | Not Provided | 2026-10-11 | 2026-10-13 |
| CVE-2026-108869 json | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to send... | Not Provided | 2026-10-11 | 2026-10-18 |
| CVE-2026-108868 json | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to publish template... | Not Provided | 2026-10-11 | 2026-10-13 |
| CVE-2026-100582 json | OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat) before 2026.8.1 do... | Not Provided | 2026-09-26 | 2026-10-08 |
| CVE-2026-100553 json | OpenClaw versions >= 2026.6.9 and < 2026.8.1 do not declare the native chatId parameter as a delivery target in the Feishu un... | Not Provided | 2026-09-26 | 2026-09-29 |
| CVE-2026-100540 json | OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabled before selecting it for mo... | Not Provided | 2026-09-26 | 2026-10-08 |
| CVE-2026-94220 json | Cross-Site request forgery (CSRF) vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX. An attacker who... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-92801 json | cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the onCardAction handler for Feishu interactive car... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-85621 json | LobeChat (LobeHub) 2.2.1 does not properly verify inbound chat-platform webhook signatures in the QQ and Feishu adapters. The... | Not Provided | 2026-09-04 | 2026-09-08 |