{"action":"Upgrade openclaw to 2026.2.19 or later.","affected":[{"fixed":"2026.2.19","introduced":"0"}],"component":"openclaw","cve_ids":["CVE-2026-3690"],"ecosystem":"npm","epss":0.00671,"exploited":false,"fixed_versions":["2026.2.19"],"ghsa_id":"GHSA-vvjh-f6p9-5vcf","id":"tcs_01M5KGD1HVMMVXY42CA4TD5NTE","modified_at":"2026-07-08T08:27:02.912821093Z","published_at":"2026-03-04T19:17:36Z","references":["https://osv.dev/vulnerability/GHSA-vvjh-f6p9-5vcf","https://github.com/openclaw/openclaw/security/advisories/GHSA-vvjh-f6p9-5vcf","https://github.com/openclaw/openclaw/commit/c45f3c5b004c8d63dc0e282e2176f8c9355d24f1","https://github.com/openclaw/openclaw"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-vvjh-f6p9-5vcf","url":"https://osv.dev/vulnerability/GHSA-vvjh-f6p9-5vcf"}],"summary":"OpenClaw Canvas Authentication Bypass Vulnerability"}