CVE-2026-56693 — NanoClaw < 2.1.17 - Privilege Escalation via Unauthorized create_agent System Action
NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the create_agent delivery-action handler that performs privileged central-database writes without host-si…
Published: 2026-06-23 · CVSS: 6.8 · CVSS 4.0
NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the create_agent delivery-action handler that performs privileged central-database writes without host-side authorization checks. Confined agent containers can invoke create_agent to create arbitrary agent groups, container configurations, and destinations, escalating beyond their intended confinement boundary.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7