CVE-2026-56694

NanoClaw before 2.1.0 contains a privilege escalation vulnerability in the channel-registration approval flow where handleChannelApprovalResponse fails to validate admin privileges over target agent groups. Scoped admins can submit forged or stale connect callback values to wire messaging channel...

CVE-2026-56694

NanoClaw before 2.1.0 contains a privilege escalation vulnerability in the channel-registration approval flow where handleChannelApprovalResponse fails to validate admin privileges over target agent groups. Scoped admins can submit forged or stale connect callback values to wire messaging channel...

CVE-2026-56694

NanoClaw

PT-2026-51532

Name of the Vulnerable Software and Affected Versions NanoClaw versions prior to 2.1.0 Description A privilege escalation issue exists in the channel-registration approval flow. The handleChannelApprovalResponse function fails to validate whether an administrator has the necessary privileges over...