<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: nanocoai-nanoclaw</title><description>Every new CVE for nanocoai-nanoclaw.</description><link>https://agentprime.io/</link><item><title>CVE-2026-90807: nanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following</title><link>https://agentprime.io/advisories/CVE-2026-90807/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90807/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Sep 2026 17:45:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-19005: nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management</title><link>https://agentprime.io/advisories/CVE-2026-19005/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-19005/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 05:45:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18991: nanocoai NanoClaw send_file core.ts path traversal</title><link>https://agentprime.io/advisories/CVE-2026-18991/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18991/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 02:30:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-17434: nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization</title><link>https://agentprime.io/advisories/CVE-2026-17434/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-17434/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 26 Jul 2026 03:00:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-17433: nanocoai NanoClaw MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization</title><link>https://agentprime.io/advisories/CVE-2026-17433/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-17433/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 26 Jul 2026 02:30:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-56694: NanoClaw &lt; 2.1.0 - Privilege Escalation via Forged Channel Approval Callback</title><link>https://agentprime.io/advisories/CVE-2026-56694/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-56694/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Jun 2026 15:35:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-56693: NanoClaw &lt; 2.1.17 - Privilege Escalation via Unauthorized create_agent System Action</title><link>https://agentprime.io/advisories/CVE-2026-56693/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-56693/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Jun 2026 15:35:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-56692: NanoClaw &lt; 2.1.17 - Arbitrary File Read via Symlink Following in forwardAttachedFiles</title><link>https://agentprime.io/advisories/CVE-2026-56692/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-56692/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Jun 2026 15:34:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-56402: NanoClaw &lt; 2.1.17 - Privilege Escalation via Unverified Approval Response Handler</title><link>https://agentprime.io/advisories/CVE-2026-56402/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-56402/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Jun 2026 15:34:05 GMT</pubDate><category>CVE</category></item></channel></rss>