CVE-2026-22171 | OpenClaw up to 2026.2.18 Temporary File media.ts os.tmpdir path traversal (GHSA-vj3g-5px3-gr46)

A vulnerability was found in OpenClaw up to 2026.2.18. It has been rated as critical. Impacted is the function os.tmpdir of the file extensions/feishu/src/media.ts of the component Temporary File Handler. Performing a manipulation results in path traversal.

This vulnerability is reported as CVE-2026-22171. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.