Skip to content

[Feature]: feishu: Cannot send local files after CVE-2026-26321 security patch #27884

@agent3721-ctrl

Description

@agent3721-ctrl

Summary

Problem

After upgrading to 2026.2.14+, local files cannot be sent to Feishu.
filePath parameter returns 400 error.

Expected behavior

Ability to send local files (images, documents, zip) to Feishu messages

Current behavior

  • filePath returns 400 error
  • file_url requires running a local HTTP server (workaround only)
  • Images cannot be embedded in feishu_doc
  • No official replacement API provided

Problem to solve

Reproduction

  1. Ask agent to send ~/Desktop/image.png to Feishu
  2. Returns 400 error or broken link

Proposed solution

Suggested fix

Provide a secure file upload API that replaces the removed filePath functionality

Alternatives considered

No response

Impact

Version

OpenClaw 2026.2.25

Evidence/examples

No response

Additional information

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requestsecuritySecurity documentation

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions