CVE-2026-56402highCWE-862

CVE-2026-56402: high-severity vulnerability in nanocoai nanoclaw

NanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response Handler

Published · Updated

Follow this CVE+ Monitor NanoClaw

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.4%
In short

NanoClaw before version 2.1.17 allows attackers to approve or reject important actions like package installation without proper permission checks. An attacker with a valid question ID can trick the system into thinking they have authorization they don't actually have.

Technical detail

The handleApprovalsResponse function in NanoClaw < 2.1.17 fails to validate the responder's role before processing approval payloads, allowing privilege escalation. An attacker with knowledge of a valid questionId can submit crafted approval responses to execute privileged operations (e.g., package installation) without proper authorization checks.

Summary generated and translated by AI from the official description.
NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the handleApprovalsResponse function that fails to verify responder role authorization. Attackers with a valid questionId can approve or reject privileged actions like package installation by submitting approval response payloads without proper role validation.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
nanocoai · nanoclaw
Related CVEs — nanocoai nanoclaw

In the same product, most dangerous first.

CVE-2026-56694MEDIUMNanoClaw < 2.1.0 - Privilege Escalation via Forged Channel Approval CallbackEPSS 0.3%CVE-2026-56692MEDIUMNanoClaw < 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFilesEPSS 0.2%CVE-2026-56693MEDIUMNanoClaw < 2.1.17 - Privilege Escalation via Unauthorized create_agent System ActionEPSS 0.2%