Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

NanoClaw — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in NanoClaw, with AI-generated Chinese analysis, references, and POCs.

Vendor: Qwibit

CVE ID Title CVSS Severity Published
CVE-2026-90807 nanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following CWE-59 6.3 Medium 2026-09-14
CVE-2026-19005 nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management CWE-269 6.3 Medium 2026-08-06
CVE-2026-18991 nanocoai NanoClaw send_file core.ts path traversal CWE-22 7.3 High 2026-08-06
CVE-2026-17434 nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization CWE-285 6.3 Medium 2026-07-26
CVE-2026-17433 nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization CWE-285 5.3 Medium 2026-07-26
CVE-2026-56694 NanoClaw < 2.1.0 - Privilege Escalation via Forged Channel Approval Callback CWE-863 5.4 Medium 2026-06-23
CVE-2026-56693 NanoClaw < 2.1.17 - Privilege Escalation via Unauthorized create_agent System Action CWE-602 5.5 Medium 2026-06-23
CVE-2026-56692 NanoClaw < 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFiles CWE-59 5.5 Medium 2026-06-23
CVE-2026-56402 NanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response Handler CWE-862 6.5 Medium 2026-06-23
CVE-2026-7875 NanoClaw Host/Container Filesystem Boundary Vulnerability via Outbound Attachment Handling CWE-22 8.8 High 2026-05-06

All 10 known CVE vulnerabilities affecting NanoClaw with full Chinese analysis, references, and POCs where available.