NA
Product
nanoclaw
9
CVEs
0
On KEV
7.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 8Low 0
Watch
Add nanoclaw to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-18991 | 7.3 | Aug 6 | nanocoai NanoClaw send_file core.ts path traversal Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +34 more |
| CVE-2026-56402 | 6.5 | Jun 23 | NanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response Handler Affected: before 2.1.17 |
| CVE-2026-90807 | 6.3 | Sep 14 | nanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following Affected: 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.1.4; 2.1.5; +12 more |
| CVE-2026-19005 | 6.3 | Aug 6 | nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +34 more |
| CVE-2026-17434 | 6.3 | Jul 26 | nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +34 more |
| CVE-2026-56693 | 5.5 | Jun 23 | NanoClaw < 2.1.17 - Privilege Escalation via Unauthorized create_agent System Action Affected: before 2.1.17 |
| CVE-2026-56692 | 5.5 | Jun 23 | NanoClaw < 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFiles Affected: before 2.1.17 |
| CVE-2026-56694 | 5.4 | Jun 23 | NanoClaw < 2.1.0 - Privilege Escalation via Forged Channel Approval Callback Affected: before 2.1.0 |
| CVE-2026-17433 | 5.3 | Jul 26 | nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +34 more |
Showing 9