CVE-2026-18991

Nanacoai NanoClaw

CVE-2026-18991 nanocoai NanoClaw send_file core.ts path traversal

A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects an unknown part of the file container/agent-runner/src/mcp-tools/core.ts of the component sendfile. Such manipulation leads to path traversal. The attack can be executed remotely. The exploit has been...

EUVD-2026-49048

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization. The attack needs to be approached...

PT-2026-64793

Name of the Vulnerable Software and Affected Versions ananocoai NanoClaw versions prior to 2.0.65 Description An improper authorization issue exists within the MCP Server Approval component, specifically affecting the createChatSdkBridge.setup function located in the src/channels/chat-sdk-bridge....