Skip to contentQwibit Nanoclaw vulnerabilities
- nanocoai nanoclawnanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link followingCVE-2026-908075.3 Medium
- nanocoai nanoclawnanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges managementCVE-2026-190055.3 Medium
- nanocoai nanoclawnanocoai NanoClaw send_file core.ts path traversalCVE-2026-189916.9 Medium
- nanocoai nanoclawnanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorizationCVE-2026-174345.3 Medium
- nanocoai nanoclawnanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorizationCVE-2026-174334.8 Medium
- nanocoai nanoclawNanoClaw < 2.1.0 - Privilege Escalation via Forged Channel Approval CallbackCVE-2026-566945.3 Medium
- nanocoai nanoclawNanoClaw < 2.1.17 - Privilege Escalation via Unauthorized create_agent System ActionCVE-2026-566936.8 Medium
- nanocoai nanoclawNanoClaw < 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFilesCVE-2026-566926.8 Medium
- nanocoai nanoclawNanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response HandlerCVE-2026-564027.1 High
- nanoco nanoclawNanoClaw Host/Container Filesystem Boundary Vulnerability via Outbound Attachment HandlingCVE-2026-78759.3 Critical