GHSA-cjv3-m589-v3rx OpenClaw has Canvas route hardening for mixed-trust deployments
Attackers in mixed-trust or network-visible deployments could bypass canvas route authorization due to shared-IP fallbacks, requiring an upgrade to secure access boundaries.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is GHSA-cjv3-m589-v3rx?
GHSA-cjv3-m589-v3rx is a missing authorization vulnerability in openclaw, published on 3 Mar 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Summary
This advisory tracks a defense-in-depth hardening for canvas routes. In mixed-trust or network-visible deployments, prior canvas auth/fallback behavior could broaden access beyond intended boundaries.
Deployment Context
OpenClaw’s default model is trusted host + loopback-first access. Some operators intentionally expose canvas routes on LAN/tailnet. This update is aimed at those broader deployment patterns.
What Changed
- Require explicit token or session-capability authorization for canvas routes.
- Remove shared-IP fallback paths for canvas access.
- Tighten bind/fallback behavior to fail closed.
Impact
Risk was highest in non-loopback or mixed-trust environments. In strict single-operator trusted-host setups, practical exposure is lower.
Affected Packages / Versions
- Package:
openclaw(npm) - Vulnerable:
<= 2026.2.19-2 - Patched:
2026.2.21(next release target)
Fix Commit(s)
c45f3c5b004c8d63dc0e282e2176f8c9355d24f108a7967936cfc0b2af6b27ec1f9272542648ad6c
Thanks @NucleiAv for reporting.
Which versions are affected by GHSA-cjv3-m589-v3rx?
2 open source packages ship an affected version, including openclaw.
| Package | Affected | Fixed in |
|---|---|---|
openclaw npm | All versions | 2026.2.21 |
openclaw npm | All versions | 2026.2.21 |
How do I fix GHSA-cjv3-m589-v3rx?
Upgrade openclaw to 2026.2.21 or later.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is GHSA-cjv3-m589-v3rx being exploited?
There is no known exploitation of GHSA-cjv3-m589-v3rx in the wild and no public exploit code.