CVE-2026-3689

OVERVIEW CVE-2026-3689 is a path traversal vulnerability affecting OpenClaw's Canvas component that enables remote attackers to access and disclose sensitive information from affected systems. The vulnerability stems from insufficient validation of path parameters in the canvas gateway endpoint, allowing attackers to traverse the file system and retrieve data in the context of the service account. SEVERITY The vulnerability carries a CVSS 3.0 score of 6.5 (Medium) with a network-based attack vector that requires low complexity and authenticated user privileges to exploit. While the attack has no impact on system integrity or availability, it poses a significant confidentiality risk by enabling unauthorized access to sensitive information. The FAUCET risk score of 35.0 out of 100 reflects moderate concern within the broader threat landscape. EXPLOITATION STATUS There is no current evidence of active exploitation in the wild, as the vulnerability is not listed on the CISA Known Exploited Vulnerabilities catalog and remains inactive on threat intelligence hot lists. The EPSS score of 0.0028 indicates this vulnerability has lower exploit probability compared to the broader CVE population. Community attention and exploit code availability appear limited at this time.