THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-56402 (MEDIUM 6.5) — NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the handleApprovalsResponse function that fails to verify responder role authorization. Attackers with a valid questionId can approve or reject privileged actions like package installation by submitting appro

[NVD] CVE-2026-56402 (MEDIUM 6.5) — NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the handleApprovalsResponse function that fails to verify responder role authorization. Attackers with a valid questionId can approve or reject privileged actions like package installation by submitting appro

lownvdPublished 2026-06-23

CVE-2026-56402 CVSS: 6.5 MEDIUM Published: 2026-06-23T16:17:05.397

NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the handleApprovalsResponse function that fails to verify responder role authorization. Attackers with a valid questionId can approve or reject privileged actions like package installation by submitting approval response payloads without proper role validation

Indicators of compromise

CVE-2026-56402cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-56402