CVE-2026-18991

Name of the Vulnerable Software and Affected Versions ananocoai NanoClaw versions prior to 2.0.65

Description A path traversal issue exists in the send file component within the file container/agent-runner/src/mcp-tools/core.ts. This flaw allows a remote attacker to manipulate file paths to access unauthorized locations. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly validated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.