CVE-2026-56402

NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the handleApprovalsResponse function that fails to verify responder role authorization. Attackers with a valid questionId can approve or reject privileged actions like package installation by submitting approval response...

PT-2026-51529

Name of the Vulnerable Software and Affected Versions NanoClaw versions prior to 2.1.17 Description A privilege escalation issue exists in the handleApprovalsResponse function. The system fails to verify the authorization of the responder role, allowing attackers who possess a valid questionId to...