CVE-2026-3689

OpenClaw Canvas contains a path traversal information disclosure in the canvas gateway endpoint due to improper validation of user-supplied path parameters. The issue, affecting OpenClaw Canvas (various versions), can allow remote attackers to disclose sensitive information within the service acc...