Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

nanocoai vulnerabilities

9 published CVEs name nanocoai among the affected products.

Newest CVEs

  • CVE-2026-90807

    nanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following

    nanocoai · NanoClaw

    Medium5.3
  • CVE-2026-19005

    nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management

    nanocoai · NanoClaw

    Medium5.3
  • CVE-2026-18991

    nanocoai NanoClaw send_file core.ts path traversal

    nanocoai · NanoClaw

    Medium6.9
  • CVE-2026-17434

    nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization

    nanocoai · NanoClaw

    Medium5.3
  • CVE-2026-17433

    nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization

    nanocoai · NanoClaw

    Medium4.8
  • CVE-2026-56694

    NanoClaw < 2.1.0 - Privilege Escalation via Forged Channel Approval Callback

    nanocoai · nanoclaw

    Medium5.3
  • CVE-2026-56693

    NanoClaw < 2.1.17 - Privilege Escalation via Unauthorized create_agent System Action

    nanocoai · nanoclaw

    Medium6.8
  • CVE-2026-56692

    NanoClaw < 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFiles

    nanocoai · nanoclaw

    Medium6.8
  • CVE-2026-56402

    NanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response Handler

    nanocoai · nanoclaw

    High7.1