CVE-2026-91835
OpenClaw ClawScan File Classifier static_scanner.go IsBinaryFile interpretation conflict
CVSS Score
2.8
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was detected in OpenClaw ClawScan up to 0.1.6. The impacted element is the function IsBinaryFile of the file internal/runner/static_scanner.go of the component File Classifier. The manipulation results in interpretation conflict. Attacking locally is a requirement. The exploit is now public and may be used. Upgrading to version 0.1.7 is sufficient to resolve this issue. The patch is identified as 04401337b3adb9343bd338b21e5e258bf49ca9c8. You should upgrade the affected component.
| CWE | CWE-436 |
| Vendor | openclaw |
| Product | clawscan |
| Published | Sep 15, 2026 |
| Last Updated | Sep 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for openclaw clawscan
Be the first to know when new low vulnerabilities affecting openclaw clawscan are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
OpenClaw / ClawScan
0.1.0 0.1.1 0.1.2 0.1.3 0.1.4 0.1.5 0.1.6
References
vuldb.com: https://vuldb.com/vuln/404071 vuldb.com: https://vuldb.com/vuln/404071/cti vuldb.com: https://vuldb.com/cve/CVE-2026-91835 vuldb.com: https://vuldb.com/submit/933532 github.com: https://github.com/openclaw/clawscan/issues/42 github.com: https://github.com/openclaw/clawscan/pull/43 github.com: https://github.com/openclaw/clawscan/commit/04401337b3adb9343bd338b21e5e258bf49ca9c8 github.com: https://github.com/openclaw/clawscan/releases/tag/v0.1.7 github.com: https://github.com/openclaw/clawscan/
Credits
🔍 nedlir (VulDB User)