Skip to content
Qwibit vulnerabilities
Newest
-
nanocoai nanoclaw
nanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following
CVE-2026-90807
5.3 Medium
-
nanocoai nanoclaw
nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management
CVE-2026-19005
5.3 Medium
-
nanocoai nanoclaw
nanocoai NanoClaw send_file core.ts path traversal
CVE-2026-18991
6.9 Medium
-
nanocoai nanoclaw
nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization
CVE-2026-17434
5.3 Medium
-
nanocoai nanoclaw
nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization
CVE-2026-17433
4.8 Medium
-
nanocoai nanoclaw
NanoClaw < 2.1.0 - Privilege Escalation via Forged Channel Approval Callback
CVE-2026-56694
5.3 Medium
-
nanocoai nanoclaw
NanoClaw < 2.1.17 - Privilege Escalation via Unauthorized create_agent System Action
CVE-2026-56693
6.8 Medium
-
nanocoai nanoclaw
NanoClaw < 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFiles
CVE-2026-56692
6.8 Medium
-
nanocoai nanoclaw
NanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response Handler
CVE-2026-56402
7.1 High
-
nanoco nanoclaw
NanoClaw Host/Container Filesystem Boundary Vulnerability via Outbound Attachment Handling
CVE-2026-7875
9.3 Critical