Skip to main content

Nanoclaw CVE-2026-17433

| EUVDEUVD-2026-49048 LOW
Improper Authorization (CWE-285)
2026-07-26 VulDB GHSA-6frr-4xvp-cwch
Authentication Bypass Nanoclaw Nanocoai
1.9
CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY
1.9 MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

4
Analysis Generated
Jul 26, 2026 - 12:05 vuln.today
Severity Changed
Jul 26, 2026 - 03:22 NVD
MEDIUM LOW
CVSS changed
Jul 26, 2026 - 03:22 NVD
4.8 (MEDIUM) 1.9 (LOW)
CVE Published
Jul 26, 2026 - 02:30 cve.org
LOW 1.9

DescriptionCVE.org

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization. The attack needs to be approached locally. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Improper authorization in NanoClaw's MCP Server Approval component allows local attackers to bypass security controls by manipulating the createChatSdkBridge.setup function. The vulnerability affects all versions up to 2.0.64, and a public exploit is available, although no active exploitation or CISA KEV inclusion has been confirmed.

More in Nanoclaw

View all
CVE-2026-7875 CRITICAL
9.3 May 06

Path traversal in NanoClaw's container filesystem boundary allows compromised containers or prompt-injected agents to es
CVE-2026-56402 HIGH
7.1 Jun 23

Privilege escalation in NanoClaw before 2.1.17 lets remote attackers with a valid questionId approve or reject privilege
CVE-2026-56692 MEDIUM
6.8 Jun 23

Symlink following in NanoClaw's agent-to-agent file forwarding exposes arbitrary host-readable files to container-contro
CVE-2026-56693 MEDIUM
6.8 Jun 23

Privilege escalation in NanoClaw before 2.1.17 allows confined agent containers to bypass their architectural confinemen
CVE-2026-90807 LOW POC
2.1 Sep 14

Link-following (symlink) handling in NanoClaw's agent-to-agent attachment forwarding lets an authenticated, low-privileg
CVE-2026-17434 LOW POC
2.1 Jul 26

Improper authorization in nanocoai NanoClaw's add_mcp_server endpoint allows authenticated attackers with low privileges
CVE-2026-19005 LOW POC
2.1 Aug 06

Improper privilege management in NanoClaw (versions up to 2.0.64) allows authenticated remote attackers to abuse the `ha
CVE-2026-56694 MEDIUM
5.3 Jun 23

Privilege escalation in NanoClaw before 2.1.0 lets scoped admins cross agent-group authorization boundaries by submittin

Same weakness CWE-285 – Improper Authorization

View all
CVE-2025-29927 CRITICAL POC
9.1
CVE-2016-5676 HIGH POC
7.5
CVE-2025-66301 CRITICAL POC
9.6
CVE-2023-32707 HIGH POC
8.8
CVE-2016-3352 HIGH
8.8
CVE-2025-29659 CRITICAL POC
9.8
CVE-2022-2595 CRITICAL POC
10.0
CVE-2026-55166 CRITICAL POC
9.9

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2026-17433 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy