CVE-2026-56692: Nanocoai Nanoclaw

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles that allows container-controlled agents to exfiltrate host-readable files. The host validates attachment filenames using only isSafeAttachmentName before copying with fs.copyFileSync, which follows symlinks without containment checks, allowing malicious agents to disclose arbitrary host files.

Affected products

• Nanocoai Nanoclaw: before 2.1.17 (fixed in 2.1.17)

Published 2026-06-23. Last modified 2026-09-17.