Описание
OpenClaw has ReDoS and regex injection via unescaped Feishu mention metadata in RegExp construction
Summary
extensions/feishu/src/bot.ts constructed new RegExp() directly from Feishu mention metadata (mention.name, mention.key) in stripBotMention() without escaping regex metacharacters.
Affected Packages / Versions
- Package: npm
openclaw - Affected versions:
<= 2026.2.17 - First affected release:
2026.2.6 - Patched version:
2026.2.19
Impact
- ReDoS: crafted nested-quantifier patterns in mention metadata can trigger catastrophic backtracking and block message processing.
- Regex injection: metacharacters in mention metadata can remove unintended message content before it is sent to the model.
Fix Commit(s)
7e67ab75cc2f0e93569d12fecd1411c2961fcc8c74268489137510b6f6349919d1e197b17290d92c
Thanks @allsmog for reporting.
Ссылки
- https://github.com/openclaw/openclaw/security/advisories/GHSA-c6hr-w26q-c636
- https://nvd.nist.gov/vuln/detail/CVE-2026-22178
- https://github.com/openclaw/openclaw/commit/74268489137510b6f6349919d1e197b17290d92c
- https://github.com/openclaw/openclaw/commit/7e67ab75cc2f0e93569d12fecd1411c2961fcc8c
- https://www.vulncheck.com/advisories/openclaw-redos-and-regex-injection-via-unescaped-feishu-mention-metadata
Пакеты
openclaw
< 2026.2.19
2026.2.19
Связанные уязвимости
OpenClaw versions prior to 2026.2.19 construct RegExp objects directly from unescaped Feishu mention metadata in the stripBotMention function, allowing regex injection and denial of service. Attackers can craft nested-quantifier patterns or metacharacters in mention metadata to trigger catastrophic backtracking, block message processing, or remove unintended content before model processing.
Уязвимость функции stripBotMention() ИИ-агента OpenClaw (ранее - ClawdBot или MoltBot), позволяющая нарушителю вызвать отказ в обслуживании