Medium severity · published Sep 14, 2026
CVE-2026-90807
nanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following
6.3
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability was found in nanocoai NanoClaw up to 2.1.17. This issue affects the function forwardAttachedFiles of the file src/modules/agent-to-agent/agent-route.ts of the component Attachment Handler. The manipulation results in link following. The attack may be performed from remote. The exploit has been made public and could be used. The patch is identified as 3f9ed607b7e7a4872747295f75286f1c377d7c33. It is advisable to implement a patch to correct this issue.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
NanoClaw · nanocoai
2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.1.4; 2.1.5; +12 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-90807
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-90807
github.com
https://github.com/nanocoai/nanoclaw/
github.com
https://github.com/nanocoai/nanoclaw/commit/3f9ed607b7e7a4872747295f75286f1c377d7c33
github.com
https://github.com/nanocoai/nanoclaw/issues/2828
vuldb.com
https://vuldb.com/cve/CVE-2026-90807
vuldb.com
https://vuldb.com/submit/922841
vuldb.com
https://vuldb.com/vuln/403309
More from NanoClaw
7.3
CVE-2026-18991
nanocoai NanoClaw send_file core.ts path traversal
6.5
CVE-2026-56402
NanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response Handler
6.3
CVE-2026-19005
nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management
6.3
CVE-2026-17434
nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization
5.5
CVE-2026-56693
NanoClaw < 2.1.17 - Privilege Escalation via Unauthorized create_agent System Action