Read the docs
TI-2026-40872 Aliases CVE-2026-56692GHSA-6373-p7g2-mx2w

NanoClaw < 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFiles

Priority LOW 29CWE-59Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-59 and the CVSS impact.

Summary

NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles that allows container-controlled agents to exfiltrate host-readable files. The host validates attachment filenames using only isSafeAttachmentName before copying with fs.copyFileSync, which follows symlinks without containment checks, allowing malicious agents to disclose arbitrary host files.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00166 5th percentileScored 2026-11-07
Fix Fixed nanoclaw (nanocoai): 2.1.17

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
nanocoainanoclawbefore 2.1.172.1.17Patch availableCNA
  • nanoclaw Vendornanocoai Affected before 2.1.17 Fixed in 2.1.17 Patch available CNA

Remediation

  • Fix · CNA nanoclaw (nanocoai) Fixed in 2.1.17

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    nanocoai nanoclaw 2.1.17

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2026-40760 NanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response HandlerPriority MEDIUM 64
    • TI-2026-40873 NanoClaw < 2.1.17 - Privilege Escalation via Unauthorized create_agent System ActionPriority LOW 29
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-56692
  2. 2026-10-03 Alias added: GHSA-6373-p7g2-mx2w

References

Patch 2

  • TI-2026-15518 nanocoai NanoClaw send_file core.ts path traversal CVSS 4.0MEDIUM 6.9
  • TI-2026-40760 NanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response Handler CVSS 4.0HIGH 7.1
  • TI-2026-61710 nanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following CVSS 4.0MEDIUM 5.3
  • TI-2026-15531 nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management CVSS 4.0MEDIUM 5.3
  • TI-2026-14327 nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization CVSS 4.0MEDIUM 5.3
  • TI-2026-14326 nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization CVSS 4.0MEDIUM 4.8
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences