Openclaw cli: OpenClaw: Gateway Canvas local-direct requests bypass Canvas HTTP and WebSocket authentication (CVE-2026-35634)

The openclaw-cli package versions prior to 2026.3.23 contain a flaw in the authorization logic within src/gateway/server/http-auth.ts. The function authorizeCanvasRequest(...) returned an unconditional allow response for local-direct requests, bypassing bearer token or capability checks. This allowed unauthenticated loopback Canvas HTTP and WebSocket requests to succeed. The vulnerability was addressed by removing the early return for local-direct requests and enforcing authentication on Canvas routes. The fix is included in versions 2026.3.23 and later.

Unauthenticated local loopback requests to Canvas HTTP and WebSocket endpoints could bypass bearer token or capability authentication, potentially allowing unauthorized access to these services on the affected system. There is no indication of remote exploitation or privilege escalation beyond the local context.

Upgrade openclaw-cli to version 2026.3.23 or later, which includes the fix requiring authentication for Canvas routes. The fix is contained in the released tags v2026.3.23 and v2026.3.23-2 and the corresponding npm package versions. No additional mitigation is required once updated.