HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-18991 — A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. Th...

·Source: NIST NVD

Updated:

Executive Summary

A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects an unknown part of the file container/agent-runner/src/mcp-tools/core.ts of the component send_file. Such manipulation leads to path traversal. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report b

Analysis

A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects an unknown part of the file container/agent-runner/src/mcp-tools/core.ts of the component send_file. Such manipulation leads to path traversal. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet. CVSS Score: 7.3. Published: 2026-08-06T03:16:22.130.

Indicators of Compromise (1)

CVE (1)
CVE-2026-18991
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 6, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Nayax and Zaria file for bank charters

Israeli payments and loyalty platform Nayax and infrastructure provider for mark-to-market credit and structured finance Zaria Systems are the latest fintechs to file applications in the US to charter banks.

Finextra
MEDIUMVulnerabilityNEW

Snowflake Hacker Pleads Guilty in US Court

Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada. The post Snowflake Hacker Pleads Guilty in US Court appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerabilityNEW

Monzo tops one million business accounts

Monzo has become the first British digital bank to surpass one million business customers.

Finextra