nanocoai vulnerabilities
9 published CVEs name nanocoai among the affected products.
- 9Published CVEs9 of them scored
- 9Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-90807
nanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following
nanocoai · NanoClaw
Medium5.3 - CVE-2026-19005
nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management
nanocoai · NanoClaw
Medium5.3 - CVE-2026-18991
nanocoai NanoClaw send_file core.ts path traversal
nanocoai · NanoClaw
Medium6.9 - CVE-2026-17434
nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization
nanocoai · NanoClaw
Medium5.3 - CVE-2026-17433
nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization
nanocoai · NanoClaw
Medium4.8 - CVE-2026-56694
NanoClaw < 2.1.0 - Privilege Escalation via Forged Channel Approval Callback
nanocoai · nanoclaw
Medium5.3 - CVE-2026-56693
NanoClaw < 2.1.17 - Privilege Escalation via Unauthorized create_agent System Action
nanocoai · nanoclaw
Medium6.8 - CVE-2026-56692
NanoClaw < 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFiles
nanocoai · nanoclaw
Medium6.8 - CVE-2026-56402
NanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response Handler
nanocoai · nanoclaw
High7.1