CVE-2026-110689
5.3 MEDIUMpublic exploit availablePublished 2026-10-14 · Updated 2026-10-15
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of the component Static Scanner. Performing a manipulation results in protection mechanism failure. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.1.7 will fix this issue. The patch is named 9f6a6fbb9f1137345566d0ab44c73893dfe112fa. The affected component should be upgraded.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-693
Public exploit & PoC references
- https://github.com/nedlir/skills-scanner-bypass
- https://github.com/openclaw/clawscan/
- https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa
- https://github.com/openclaw/clawscan/issues/39
- https://github.com/openclaw/clawscan/pull/41
- https://github.com/openclaw/clawscan/releases/tag/v0.1.7
All references
- https://github.com/nedlir/skills-scanner-bypass
- https://github.com/openclaw/clawscan/
- https://github.com/openclaw/clawscan/commit/9f6a6fbb9f1137345566d0ab44c73893dfe112fa
- https://github.com/openclaw/clawscan/issues/39
- https://github.com/openclaw/clawscan/pull/41
- https://github.com/openclaw/clawscan/releases/tag/v0.1.7
- https://vuldb.com/cve/CVE-2026-110689
- https://vuldb.com/submit/1003915
- https://vuldb.com/vuln/419836
- https://vuldb.com/vuln/419836/cti
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- LOWCVE-2025-71424PoC
- HIGHCVE-2026-100676PoC
- CRITICALCVE-2026-100760
- CRITICALCVE-2026-100775
- HIGHCVE-2026-100808
- CRITICALCVE-2026-100828
- CRITICALCVE-2026-100829
- UNSCOREDCVE-2026-101899PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.