High severity · published Aug 6, 2026
CVE-2026-18991
nanocoai NanoClaw send_file core.ts path traversal
7.3
CVSS
0.6%
EPSS
No
On KEV
Description
A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects an unknown part of the file container/agent-runner/src/mcp-tools/core.ts of the component send_file. Such manipulation leads to path traversal. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
NanoClaw · nanocoai
2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +34 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-18991
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-18991
github.com
https://github.com/nanocoai/nanoclaw/
github.com
https://github.com/nanocoai/nanoclaw/issues/2760
vuldb.com
https://vuldb.com/cve/CVE-2026-18991
vuldb.com
https://vuldb.com/submit/862563
vuldb.com
https://vuldb.com/vuln/386367
vuldb.com
https://vuldb.com/vuln/386367/cti
More from NanoClaw
6.5
CVE-2026-56402
NanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response Handler
6.3
CVE-2026-90807
nanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following
6.3
CVE-2026-19005
nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management
6.3
CVE-2026-17434
nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization
5.5
CVE-2026-56693
NanoClaw < 2.1.17 - Privilege Escalation via Unauthorized create_agent System Action