Skip to content

[Feature]: feishu: Cannot send local files after CVE-2026-26321 security patch #27884

@agent3721-ctrl

Description

@agent3721-ctrl

Summary

Problem

After upgrading to 2026.2.14+, local files cannot be sent to Feishu.
filePath parameter returns 400 error.

Expected behavior

Ability to send local files (images, documents, zip) to Feishu messages

Current behavior

  • filePath returns 400 error
  • file_url requires running a local HTTP server (workaround only)
  • Images cannot be embedded in feishu_doc
  • No official replacement API provided

Problem to solve

Reproduction

  1. Ask agent to send ~/Desktop/image.png to Feishu
  2. Returns 400 error or broken link

Proposed solution

Suggested fix

Provide a secure file upload API that replaces the removed filePath functionality

Alternatives considered

No response

Impact

Version

OpenClaw 2026.2.25

Evidence/examples

No response

Additional information

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requestsecuritySecurity documentation

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions