THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-56694 (MEDIUM 5.4) — NanoClaw before 2.1.0 contains a privilege escalation vulnerability in the channel-registration approval flow where handleChannelApprovalResponse fails to validate admin privileges over target agent groups. Scoped admins can submit forged or stale connect callback values to wire

[NVD] CVE-2026-56694 (MEDIUM 5.4) — NanoClaw before 2.1.0 contains a privilege escalation vulnerability in the channel-registration approval flow where handleChannelApprovalResponse fails to validate admin privileges over target agent groups. Scoped admins can submit forged or stale connect callback values to wire

lownvdPublished 2026-06-23

CVE-2026-56694 CVSS: 5.4 MEDIUM Published: 2026-06-23T16:17:06.040

NanoClaw before 2.1.0 contains a privilege escalation vulnerability in the channel-registration approval flow where handleChannelApprovalResponse fails to validate admin privileges over target agent groups. Scoped admins can submit forged or stale connect callback values to wire messaging channels into out-of-scope agent groups, e

Indicators of compromise

CVE-2026-56694cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-56694