MEDIUM

CVE-2026-56692

2026-06-23 CVSS v3.1

CVSS

5.5

Description

NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles that allows container-controlled agents to exfiltrate host-readable files. The host validates attachment filenames using only isSafeAttachmentName before copying with fs.copyFileSync, which follows symlinks without containment checks, allowing malicious agents to disclose arbitrary host files.

Weakness (CWE)

CWE-59 Link Following (Symlink)

EPSS Score

0.17%

Probability of exploitation in next 30 days

6.2th percentile

References

https://github.com/nanocoai/nanoclaw/commit/28032bc0eca76c91fb3d8be0013e8bcaf2f5aeae https://github.com/nanocoai/nanoclaw/pull/2468 https://www.vulncheck.com/advisories/nanoclaw-arbitrary-file-read-via-symlink-following-in-forwardattachedfiles

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE