What is the CVSS score of CVE-2026-3689?

CVE-2026-3689 has a CVSS 3.0 base score of 6.5 (Medium). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.3%.

Is there a patch available for CVE-2026-3689?

Yes, a patch is available for CVE-2026-3689. Update the affected software to the latest version immediately.

Openclaw CVE-2026-3689

EUVD-2026-21619 MEDIUM

Path Traversal (CWE-22)

2026-04-11 zdi

Information Disclosure Path Traversal Openclaw

6.5

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Apr 11, 2026 - 01:00 euvd

EUVD-2026-21619

Analysis Generated

Apr 11, 2026 - 01:00 vuln.today

CVE Published

Apr 11, 2026 - 00:17 nvd

MEDIUM 6.5

DescriptionCVE.org

OpenClaw Canvas Path Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenClaw. Authentication is required to exploit this vulnerability.

The specific flaw exists within the handling of the path parameters provided to the canvas gateway endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-29312.

AnalysisAI

Authenticated remote attackers can traverse the file system through the OpenClaw canvas gateway endpoint to disclose sensitive information due to insufficient path validation. The vulnerability affects OpenClaw across unspecified versions and requires valid user credentials; attackers operating with low-privilege accounts can read arbitrary files in the service account context. No public exploit code or active exploitation has been identified at the time of analysis.

Technical ContextAI

The vulnerability exists in OpenClaw's canvas gateway endpoint, which processes path parameters for file operations. The root cause is classified as CWE-22 (Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'). The endpoint fails to properly validate or sanitize user-supplied path inputs before passing them to file system operations, allowing an attacker to use directory traversal sequences (such as '../' or encoded variants) to access files outside the intended directory. Since the service operates within a service account context, the attacker's read access is bounded by that account's file system permissions rather than individual user restrictions. The CPE designation (cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) indicates the vulnerability affects OpenClaw without specific version constraints documented in the available data.

RemediationAI

Apply the patch or upgrade provided by the OpenClaw project as documented in the GitHub security advisory GHSA-jq4x-98m3-ggq6 (https://github.com/openclaw/openclaw/security/advisories/GHSA-jq4x-98m3-ggq6) and the ZDI advisory ZDI-26-227 (https://www.zerodayinitiative.com/advisories/ZDI-26-227/). As a temporary mitigation, restrict network access to the OpenClaw canvas gateway endpoint to trusted users only, and monitor file system access logs for suspicious path traversal patterns in requests to that endpoint. Ensure service account permissions follow the principle of least privilege to minimize the scope of information that can be disclosed even if the vulnerability is exploited.