CVE-2026-19005

Name of the Vulnerable Software and Affected Versions nanocoai NanoClaw versions prior to 2.0.65

Description Improper privilege management exists within the Child-Agent Creation component. The issue resides in the handleCreateAgent() function located in the src/modules/agent-to-agent/create-agent.ts file, which allows for remote exploitation through manipulation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the handleCreateAgent() function to minimize the risk of exploitation.