What’s Vulnerable › Products

nanocoai NanoClaw vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your nanocoai NanoClaw version is affected

Latest nanocoai NanoClaw vulnerabilities

• CVE-2026-90807 — nanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following (CVSS 6.3)
• CVE-2026-19005 — nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management (CVSS 6.3)
• CVE-2026-18991 — nanocoai NanoClaw send_file core.ts path traversal (CVSS 7.3)
• CVE-2026-17434 — nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization (CVSS 6.3)
• CVE-2026-17433 — nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization (CVSS 5.3)
• CVE-2026-56694 — NanoClaw < 2.1.0 - Privilege Escalation via Forged Channel Approval Callback (CVSS 5.4)
• CVE-2026-56693 — NanoClaw < 2.1.17 - Privilege Escalation via Unauthorized create_agent System Action (CVSS 5.5)
• CVE-2026-56692 — NanoClaw < 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFiles (CVSS 5.5)
• CVE-2026-56402 — NanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response Handler (CVSS 6.5)