CVE-2026-90807

CVE-2026-90807 is a link following vulnerability in nanocoai NanoClaw (up to version 2.1.17 ), located in the function forwardAttachedFiles within the file src/modules/agent-to-agent/agent-route.ts of the Attachment Handler component. A remote attacker with low privileges can exploit this without...