Authorization Bypass in OpenClaw Feishu Tools

Executive Summary

CVE-2026-62187 is a vulnerability in the OpenClaw Feishu tools, specifically the npm package @openclaw/feishu, affecting versions up to and including 2026.6.6. The issue involves the software ignoring per-account disablement settings, which means that a lower-trust caller or a configured input path could perform actions that should require stronger authorization or policy checks. This could lead to unauthorized operations within the system.

The vulnerability is fixed in version 2026.6.9 of the package. The impact of this vulnerability depends on how the operator has configured the system and whether lower-trust input can reach the affected feature.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability involves checking the installed version of the @openclaw/feishu npm package and verifying if it is within the affected range (<= 2026.6.6). You can also monitor for unauthorized operations or actions performed by lower-trust callers that bypass policy checks.

• Check the installed version of the @openclaw/feishu package using npm: npm list @openclaw/feishu
• Review logs or audit trails for unexpected or unauthorized operations, particularly those originating from lower-trust input paths or callers.
• Inspect configuration files or policies to ensure per-account disablement settings are properly enforced and not being ignored.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability can vary depending on your system configuration and usage of the affected package. Here are potential impacts:

• Unauthorized operations: Lower-trust users or inputs may perform actions that should be restricted, leading to unauthorized changes or access within your system.
• Data breaches: If the unauthorized operations involve sensitive data, this could result in data leaks or unauthorized data manipulation.
• Security policy bypass: The vulnerability allows bypassing of security policies or authorization checks, which could undermine the security controls you have in place.
• Operational risks: Depending on the actions performed, this could disrupt normal operations or lead to unintended consequences in your workflows.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could affect compliance with common standards and regulations in the following ways:

• GDPR (General Data Protection Regulation): If unauthorized operations lead to the exposure or mishandling of personal data, this could violate GDPR requirements for data protection and privacy. Organizations may face penalties for failing to protect personal data adequately.
• HIPAA (Health Insurance Portability and Accountability Act): For organizations handling protected health information (PHI), unauthorized access or operations could result in violations of HIPAA's security and privacy rules, leading to potential fines and legal consequences.
• Other standards: Compliance frameworks like ISO 27001, SOC 2, or PCI DSS require strict access controls and authorization checks. This vulnerability could indicate a failure to meet these requirements, potentially leading to non-compliance and associated risks.

The exact impact on compliance will depend on how the vulnerability is exploited and the nature of the data or operations involved.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, follow these immediate steps:

• Upgrade the @openclaw/feishu package to version 2026.6.9 or later, as this version contains the fix for the issue. Use the command: npm update @openclaw/[email protected]
• Review and enforce strict authorization and policy checks for all operations, especially those involving lower-trust callers or input paths.
• Audit your system for any unauthorized operations that may have occurred due to this vulnerability and revoke any unintended access or permissions.
• Monitor network traffic and system logs for signs of exploitation or unauthorized activity until the patch is applied.

Useful 0 Not Useful 0