CVE-2026-56693mediumCWE-602

CVE-2026-56693: medium-severity vulnerability in nanocoai nanoclaw

NanoClaw < 2.1.17 - Privilege Escalation via Unauthorized create_agent System Action

Published · Updated

Follow this CVE+ Monitor NanoClaw

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 0.2%
In short

NanoClaw versions before 2.1.17 allow confined container agents to create new agents and configurations without proper permission checks, letting them escape their intended restrictions and gain unauthorized control.

Technical detail

The create_agent delivery-action handler in NanoClaw < 2.1.17 performs privileged database operations without host-side authorization validation (CWE-602). Confined agent containers can exploit this to create arbitrary agent groups and destinations, escalating privileges beyond their sandbox boundary.

Summary generated and translated by AI from the official description.
NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the create_agent delivery-action handler that performs privileged central-database writes without host-side authorization checks. Confined agent containers can invoke create_agent to create arbitrary agent groups, container configurations, and destinations, escalating beyond their intended confinement boundary.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
nanocoai · nanoclaw
Related CVEs — nanocoai nanoclaw

In the same product, most dangerous first.

CVE-2026-56402HIGHNanoClaw < 2.1.17 - Privilege Escalation via Unverified Approval Response HandlerEPSS 0.4%CVE-2026-56694MEDIUMNanoClaw < 2.1.0 - Privilege Escalation via Forged Channel Approval CallbackEPSS 0.3%CVE-2026-56692MEDIUMNanoClaw < 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFilesEPSS 0.2%