OpenClaw Feishu tools bypass user disables

Published September 3, 2026 GHSA-2q7j-2vhx-56g8

OpenClaw's Feishu integration could keep working for an account even after an operator turned it off. That let someone who was supposed to be blocked keep sending messages or taking actions in a connected Feishu workspace.

Severity
HighCVSS 8.1
Fix
Fixed in 2026.6.9Fix recorded on Sep 3, 2026
Affected versions
before 2026.6.9-beta.1
Weakness
CWE-863
Affects
@openclaw/feishu

How it works

Operators can disable Feishu tool access for one specific account, but OpenClaw's code did not always check that flag before running the tool, so requests tied to a disabled account could still reach Feishu and act with its permissions.

What to do

Check your installed @openclaw/feishu package version with npm. If it is older than 2026.6.9, the disablement bypass applies to your setup, especially if you share one Gateway between users who should not trust each other.

Run this in the application environment you want to check:

npm ls @openclaw/feishu

Update @openclaw/feishu to version 2026.6.9 or later. Until you can update, restrict the Feishu tools to trusted operators, keep channel and tool allowlists narrow, and disable the Feishu feature entirely if you are not actively using it.

Technical details

Affected software: @openclaw/feishu

OpenClaw Feishu tools could ignore per-account disablement. Feishu tools could ignore per-account disablement.

References

View Original Source