Medium severity6.5NVD Advisory· Published Apr 11, 2026· Updated Apr 27, 2026
CVE-2026-3689
CVE-2026-3689
Description
OpenClaw Canvas Path Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenClaw. Authentication is required to exploit this vulnerability.
The specific flaw exists within the handling of the path parameters provided to the canvas gateway endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-29312.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/openclaw/openclaw/security/advisories/GHSA-jq4x-98m3-ggq6nvdThird Party AdvisoryExploit
- www.zerodayinitiative.com/advisories/ZDI-26-227/nvdThird Party AdvisoryExploit
News mentions
1- ZDI-26-227: OpenClaw Canvas Path Traversal Information Disclosure VulnerabilityZero Day Initiative · Mar 30, 2026