Back
Vendor security profile
Nanocoai
Click a year for its months, then a month to list its CVEs.
Critical 0 High 0 Medium 0 Low 0
Unscored 5
Unscored (100%): no CVSS from NVD yet, not a sign the CVE is harmless.
Latest CVEs for Nanocoai
6.3CVSS
CVE-2026-90807 · Sep 14, 2026
A vulnerability was found in nanocoai NanoClaw up to 2.1.17. This issue affects the function forwardAttachedFiles of the file src/modules/agent-to-agent/agent-route.ts of the component Attachment Handler. The manipulation results in link fo…
DEFERRED
MEDIUM
6.3CVSS
CVE-2026-19005 · Aug 06, 2026
A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts of the component Child-Agent Creation. Performing a manipulation results in im…
DEFERRED
MEDIUM
7.3CVSS
CVE-2026-18991 · Aug 06, 2026
A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects an unknown part of the file container/agent-runner/src/mcp-tools/core.ts of the component send_file. Such manipulation leads to path traversal. The a…
DEFERRED
HIGH
6.3CVSS
CVE-2026-17434 · Jul 26, 2026
A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component add_mcp_server. Executing a manipulation can lead to improper authorization. T…
DEFERRED
MEDIUM
5.3CVSS
CVE-2026-17433 · Jul 26, 2026
A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in impro…
DEFERRED
MEDIUM