Beveiligingsadvies

CVE-2026-56692

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-23 15:34:56

Laatst bijgewerkt 2026-07-14 21:34:15

Toegewezen door VulnCheck

CVSS-score 6.8

Status PUBLISHED

Beschrijving

NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles that allows container-controlled agents to exfiltrate host-readable files. The host validates attachment filenames using only isSafeAttachmentName before copying with fs.copyFileSync, which follows symlinks without containment checks, allowing malicious agents to disclose arbitrary host files.

← Alle CVE's bekijken Bekijk op cve.org ↗