{"data":{"id":"9a81273f-7395-41f2-b812-f9a04811928e","title":"GHSA-vvjh-f6p9-5vcf: OpenClaw Canvas Authentication Bypass Vulnerability","summary":"OpenClaw's gateway function `authorizeCanvasRequest()` in `src/gateway/server-http.ts` grants canvas endpoints (`/__openclaw__/a2ui/`, `/__openclaw__/canvas/`, `/__openclaw__/ws`) access to any HTTP request from a private IP that matches an authenticated WebSocket client, without checking the request's own credentials. Tested on openclaw 2026.2.17 on macOS 26.3, the flaw lets an unauthenticated attacker sharing an IP with a legitimate client, such as behind corporate NAT or in Kubernetes or Docker shared networking, gain full canvas access.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-vvjh-f6p9-5vcf","publishedAt":"2026-03-04T19:17:36.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["openclaw@< 2026.2.19 (fixed: 2026.2.19)"],"affectedPackageNames":["openclaw"],"affectedPackageRefs":["npm:openclaw"],"affectedVendors":[],"affectedVendorsRaw":["OpenClaw"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-vvjh-f6p9-5vcf"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":"2026-02-19T16:05:33.610Z","daysToFix":-13,"fixCheckedAt":"2026-10-29T21:40:14.972Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"openclaw","fixedVersion":"2026.2.19","matchedVersion":"2026.2.19","fixReleasedAt":"2026-02-19T16:05:33.610Z","daysToFix":-13,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:40:14.769Z"}]}}