OpenClaw Feishu Auth Bypass

Fail-open authentication in AI agent messaging channel lets unauthenticated traffic reach command dispatch

CVE-2026-44109 / GHSA-xh72-v6v9-mwhc affects the openclaw npm package before version 2026.4.15. Two fail-open validation paths in the Feishu webhook integration allow unauthenticated inbound requests to bypass signature verification and reach OpenClaw's agent command dispatch. Missing encryptKey configuration is treated as acceptable rather than rejected at startup, and malformed card-action callbacks with blank tokens pass into lifecycle handling without rejection. OpenClaw connects LLM reasoning to shell execution, filesystem access, browser automation, Docker containers, and messaging platforms — making a channel-authentication bypass a direct path to those execution surfaces.

"Severity remains critical because affected webhook deployments expose a network-triggered path into OpenClaw command handling without the expected Feishu signature or replay protection."

— GitHub Advisory Database, GHSA-xh72-v6v9-mwhc