nanocoai NanoClaw

• CVE-2026-90807 Medium 6.3 nanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following 0.4%
• CVE-2026-19005 Medium 6.3 nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management 0.4%
• CVE-2026-18991 High 7.3 nanocoai NanoClaw send_file core.ts path traversal 0.6%
• CVE-2026-17434 Medium 6.3 nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization 0.4%
• CVE-2026-17433 Medium 5.3 nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization 0.1%
• CVE-2026-56694 Medium 5.4 NanoClaw < 2.1.0 - Privilege Escalation via Forged Channel Approval Callback 0.3%
• CVE-2026-56693 Medium 5.5 NanoClaw < 2.1.17 - Privilege Escalation via Unauthorized create_agent System Action 0.2%
• CVE-2026-56692 Medium 5.5 NanoClaw < 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFiles 0.2%
• CVE-2026-56402 Medium 6.5 NanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response Handler 0.4%