THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-56692 (MEDIUM 5.5) — NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles that allows container-controlled agents to exfiltrate host-readable files. The host validates attachment filenames using only isSafeAttachmentName before copying with fs.copyFileSync, which

[NVD] CVE-2026-56692 (MEDIUM 5.5) — NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles that allows container-controlled agents to exfiltrate host-readable files. The host validates attachment filenames using only isSafeAttachmentName before copying with fs.copyFileSync, which

lownvdPublished 2026-06-23

CVE-2026-56692 CVSS: 5.5 MEDIUM Published: 2026-06-23T16:17:05.753

NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles that allows container-controlled agents to exfiltrate host-readable files. The host validates attachment filenames using only isSafeAttachmentName before copying with fs.copyFileSync, which follows symlinks without containment checks, allowin

Indicators of compromise

CVE-2026-56692cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-56692