CVE-2026-56692 — NanoClaw < 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFiles
NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles that allows container-controlled agents to exfiltrate host-readable files. The host val…
Published: 2026-06-23 · CVSS: 6.8 · CVSS 4.0
NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles that allows container-controlled agents to exfiltrate host-readable files. The host validates attachment filenames using only isSafeAttachmentName before copying with fs.copyFileSync, which follows symlinks without containment checks, allowing malicious agents to disclose arbitrary host files.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7