CVE-2026-56693

Name of the Vulnerable Software and Affected Versions NanoClaw versions prior to 2.1.17

Description A privilege escalation issue exists in the create agent delivery-action handler. The handler performs privileged central-database writes without implementing host-side authorization checks. This allows confined agent containers to invoke create agent to create arbitrary agent groups, container configurations, and destinations, enabling them to escalate privileges beyond their intended confinement boundary.

Recommendations Update to version 2.1.17 or later.