Skip to main content

Nanoclaw CVE-2026-17434

| EUVDEUVD-2026-49049 LOW
Improper Authorization (CWE-285)
2026-07-26 VulDB GHSA-m5r3-634q-m3rj
Authentication Bypass Nanoclaw Nanocoai
2.1
CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY
2.1 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

5
Source Code Evidence Fetched
Jul 26, 2026 - 12:05 vuln.today
Analysis Generated
Jul 26, 2026 - 12:05 vuln.today
Severity Changed
Jul 26, 2026 - 04:22 NVD
MEDIUM LOW
CVSS changed
Jul 26, 2026 - 04:22 NVD
5.3 (MEDIUM) 2.1 (LOW)
CVE Published
Jul 26, 2026 - 03:00 cve.org
LOW 2.1

DescriptionCVE.org

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component add_mcp_server. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been published and may be used. This patch is called e5b928783d5c485637565eb07d2967922dfbf8d8. A patch should be applied to remediate this issue.

AnalysisAI

Improper authorization in nanocoai NanoClaw's add_mcp_server endpoint allows authenticated attackers with low privileges to bypass access controls and perform unauthorized actions, such as adding MCP servers without proper authorization. Versions up to and including 2.0.64 are affected, and publicly available exploit code exists. A vendor patch is available via commit e5b928783d5c485637565eb07d2967922dfbf8d8.

More in Nanoclaw

View all
CVE-2026-7875 CRITICAL
9.3 May 06

Path traversal in NanoClaw's container filesystem boundary allows compromised containers or prompt-injected agents to es
CVE-2026-56402 HIGH
7.1 Jun 23

Privilege escalation in NanoClaw before 2.1.17 lets remote attackers with a valid questionId approve or reject privilege
CVE-2026-56692 MEDIUM
6.8 Jun 23

Symlink following in NanoClaw's agent-to-agent file forwarding exposes arbitrary host-readable files to container-contro
CVE-2026-56693 MEDIUM
6.8 Jun 23

Privilege escalation in NanoClaw before 2.1.17 allows confined agent containers to bypass their architectural confinemen
CVE-2026-90807 LOW POC
2.1 Sep 14

Link-following (symlink) handling in NanoClaw's agent-to-agent attachment forwarding lets an authenticated, low-privileg
CVE-2026-19005 LOW POC
2.1 Aug 06

Improper privilege management in NanoClaw (versions up to 2.0.64) allows authenticated remote attackers to abuse the `ha
CVE-2026-17433 LOW POC
1.9 Jul 26

Improper authorization in NanoClaw's MCP Server Approval component allows local attackers to bypass security controls by
CVE-2026-56694 MEDIUM
5.3 Jun 23

Privilege escalation in NanoClaw before 2.1.0 lets scoped admins cross agent-group authorization boundaries by submittin

Same weakness CWE-285 – Improper Authorization

View all
CVE-2025-29927 CRITICAL POC
9.1
CVE-2016-5676 HIGH POC
7.5
CVE-2025-66301 CRITICAL POC
9.6
CVE-2023-32707 HIGH POC
8.8
CVE-2016-3352 HIGH
8.8
CVE-2025-29659 CRITICAL POC
9.8
CVE-2022-2595 CRITICAL POC
10.0
CVE-2026-55166 CRITICAL POC
9.9

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2026-17434 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy