CVE-2026-3690 — OpenClaw Canvas Authentication Bypass Vulnerability

Affected: OpenClaw

OpenClaw Canvas Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of OpenClaw. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the implementation of the the authentication function for canvas endpoints. The issue results from improper implementation of authentication. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-29311.

GHSA-vvjh-f6p9-5vcf — OpenClaw Canvas Authentication Bypass Vulnerability

Affected: npm: openclaw

ZDI-CAN-29311: OpenClaw Canvas Authentication Bypass Vulnerability

-- ABSTRACT -------------------------------------

Trend Micro's Zero Day Initiative has identified a vulnerability affecting the following products: OpenClaw - OpenClaw

-- VULNERABILITY DETAILS ------------------------ * Version tested: openclaw 2026.2.17 * Platform tested: macOS 26.3

---

### Analysis

## Description

The OpenClaw gateway's `authorizeCanvasRequest()` function implements an IP-based authentication fallback for canvas endpoints (`/__openclaw__/a2ui/`, `/__openclaw__/canvas/`, `/__openclaw__/ws`). When a WebSocket client authenticates from a private IP address, ALL subsequent HTTP requests from that same IP are granted canvas access without requiring their own authentication token.

In environments where multiple clients share a single IP address �� corporate NAT, VPN concentrators, Kubernetes clusters, Docker host-mode networking �� an unauthenticated attacker on the same network is granted full canvas access by virtue of sharing an IP with a legitimate authenticated client.

## Root Cause

Three functions in `src/gateway/server-http.ts` create this vulnerability:

### 1. IP-matching function (line ~100)

```typescript function hasAuthorizedWsClientForIp(clients: Set<GatewayWsClient>, clientIp: string): boolean { for (const client of clients) { if (client.clientIp && client.clientIp === clientIp) { return true; } } return false; } ```

This function checks if ANY conn…

Most recent entries from all

CVE-2026-3690 — OpenClaw Canvas Authentication Bypass Vulnerability

GHSA-vvjh-f6p9-5vcf — OpenClaw Canvas Authentication Bypass Vulnerability