Threats Tagged 'cve-2026-3690'
View all threats tagged with 'cve-2026-3690'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-3690'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-3690 is an authentication bypass vulnerability in OpenClaw CLI's canvas endpoints. The vulnerability arises because the OpenClaw gateway grants access to canvas endpoints based solely on the client's private IP address if any WebSocket client from the same IP is authenticated. This allows unauthenticated attackers sharing the same private IP (e.g., behind NAT or in containerized environments) to access canvas resources without their own authentication token. The issue affects OpenClaw versions prior to 2026.7.1 and has a CVSS score of 7.4 (high severity). A patch is available to address this vulnerability. Join the discussion | GCVE Database | 08/13/2026, 17:21:32 UTC Added: 10/04/2026, 12:25:12 UTC |
Showing 1 to 1 of 1 result