CVE-2026-92801

cc-connect through version 1.5.0 fails to apply per-user allowlist filtering in the onCardAction handler that processes Feishu (Lark) interactive card callbacks, even though the plain text message handler does enforce these access controls. An attacker who can trigger card actions inside a chat where the bot has been admitted can dispatch agent commands that the bot executes, bypassing the per-user access controls entirely. Because the dispatched commands run through the connected agent, the flaw carries high confidentiality, integrity, and availability impact (CVSS 4.0 score 8.7) while requiring only low privileges and no user interaction. Anyone running cc-connect 1.5.0 or earlier as a Feishu bot with interactive card callbacks enabled is affected. No public proof-of-concept is known and the flaw is not listed in CISA KEV, so exploitation is not currently known to be occurring.

What to do: Upgrade cc-connect to a release newer than 1.5.0 that enforces the per-user allowlist in the onCardAction handler as soon as a fixed version is available. As an interim mitigation, restrict or disable interactive card actions in admitted Feishu chats, and audit bot logs for agent commands triggered via card callbacks from users who are not on the allowlist.