Affected: Homebrew: openclaw-cli

ZDI-CAN-29311: OpenClaw Canvas Authentication Bypass Vulnerability

-- ABSTRACT -------------------------------------

Trend Micro's Zero Day Initiative has identified a vulnerability affecting the following products: OpenClaw - OpenClaw

-- VULNERABILITY DETAILS ------------------------ * Version tested: openclaw 2026.2.17 * Platform tested: macOS 26.3

---

### Analysis

## Description

The OpenClaw gateway's `authorizeCanvasRequest()` function implements an IP-based authentication fallback for canvas endpoints (`/__openclaw__/a2ui/`, `/__openclaw__/canvas/`, `/__openclaw__/ws`). When a WebSocket client authenticates from a private IP address, ALL subsequent HTTP requests from that same IP are granted canvas access without requiring their own authentication token.

In environments where multiple clients share a single IP address ��� corporate NAT, VPN concentrators, Kubernetes clusters, Docker host-mode networking ��� an unauthenticated attacker on the same network is granted full canvas access by virtue of sharing an IP with a legitimate authenticated client.

## Root Cause

Three functions in `src/gateway/server-http.ts` create this vulnerability:

### 1. IP-matching function (line ~100)

```typescript function hasAuthorizedWsClientForIp(clients: Set<GatewayWsClient>, clientIp: string): boolean { for (const client of clients) { if (client.clientIp && client.clientIp === clientIp) { return true; } } return false; } ```

This function checks if ANY conn…