Known Vulnerabilities for Feishu by Openclaw
Listed below are 10 of the newest known vulnerabilities associated with "Feishu" by "Openclaw".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-100582 json | OpenClaw channel plugins (@openclaw/msteams, @openclaw/feishu, @openclaw/matrix, and @openclaw/googlechat) before 2026.8.1 do... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100553 json | OpenClaw versions >= 2026.6.9 and < 2026.8.1 do not declare the native chatId parameter as a delivery target in the Feishu un... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100540 json | OpenClaw Feishu before 2026.8.1 fails to validate whether a configured default account is disabled before selecting it for mo... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-92801 json | cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the onCardAction handler for Feishu interactive car... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-85621 json | LobeChat (LobeHub) 2.2.1 does not properly verify inbound chat-platform webhook signatures in the QQ and Feishu adapters. The... | Not Provided | 2026-09-04 | 2026-09-08 |
| CVE-2026-62188 json | OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in which the Feishu ... | Not Provided | 2026-07-13 | 2026-07-15 |
| CVE-2026-62187 json | OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. A lower-tr... | Not Provided | 2026-07-13 | 2026-07-15 |
| CVE-2026-16330 json | A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /web/jquery/u... | Not Provided | 2026-07-21 | 2026-07-21 |
| CVE-2026-16197 json | A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. The affected element is the function handleMessage... | Not Provided | 2026-07-18 | 2026-07-20 |
| CVE-2021-3305 json | Beijing Feishu Technology Co., Ltd Feishu v3.40.3 was discovered to contain an untrusted search path vulnerability. | Not Provided | 2022-10-18 | 2026-07-09 |