Medium severity · published Jun 23, 2026
CVE-2026-56692
NanoClaw < 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFiles
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles that allows container-controlled agents to exfiltrate host-readable files. The host validates attachment filenames using only isSafeAttachmentName before copying with fs.copyFileSync, which follows symlinks without containment checks, allowing malicious agents to disclose arbitrary host files.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
nanoclaw · nanocoai
before 2.1.17 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-56692
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-56692
github.com
https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae
github.com
https://github.com/nanocoai/nanoclaw/pull/2468
www.vulncheck.com
https://www.vulncheck.com/advisories/nanoclaw-arbitrary-file-read-via-symlink-following-in-forwardattachedfiles
More from nanoclaw
7.3
CVE-2026-18991
nanocoai NanoClaw send_file core.ts path traversal
6.5
CVE-2026-56402
NanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response Handler
6.3
CVE-2026-90807
nanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following
6.3
CVE-2026-19005
nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management
6.3
CVE-2026-17434
nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization