OpenClaw Canvas Authentication Bypass Vulnerability in OpenClaw

CVE-2026-3690

What is CVE-2026-3690?

The OpenClaw Canvas Authentication Bypass vulnerability allows remote attackers to exploit a flaw in the authentication function for canvas endpoints. Improper implementation of authentication enables unauthorized access, allowing attackers to bypass security measures entirely. Given that authentication is not required for exploitation, affected installations of OpenClaw are at significant risk. Administrators should promptly assess their systems and implement necessary mitigations to safeguard against potential intrusions. For more detailed guidance, refer to vendor advisory resources.

References