Vulnerability · Published Jun 23, 2026 · Assigned by VulnCheck

CVE-2026-56692NanoClaw < 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFiles

Medium 5.5

In plain English

A medium-severity security flaw in nanoclaw from nanocoai. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)0.2%top 94.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles that allows container-controlled agents to exfiltrate host-readable files. The host validates attachment filenames using only isSafeAttachmentName before copying with fs.copyFileSync, which follows symlinks without containment checks, allowing malicious agents to disclose arbitrary host files.

Affected products (as reported)

Vendor	Product	Versions
nanocoai	nanoclaw	0 – before 2.1.17

Weakness: CWE-59 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

Pull Request issue-tracking, patch
Patch Commit patch
https://www.vulncheck.com/advisories/nanoclaw-arbitrary-file-read-via-symlink-following-in-forwardattachedfiles third-party-advisory