Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-3689: OpenClaw Canvas Path Traversal Allows Remote Disclosure of Sensitive Data

CVE-2026-3689 · published 6 months ago

Summary

An attacker can access sensitive information on your OpenClaw installation, even if they're not logged in, by manipulating the path to files used by OpenClaw. This is a serious issue because it could expose confidential data to unauthorized parties. To protect your OpenClaw installation, update to the latest version as soon as possible.

Original advisory text

OpenClaw Canvas Path Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenClaw. Authentication is required to exploit this vulnerability.

The specific flaw exists within the handling of the path parameters provided to the canvas gateway endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-29312.

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

6.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-22Path Traversal

Timeline

Published11 Apr 2026

Updated4 Nov 2026

First seen11 Apr 2026

Sources

CVE-2026-3689 · NVD

Track software like this

Free during beta