Description
NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles that allows container-controlled agents to exfiltrate host-readable files. The host validates attachment filenames using only isSafeAttachmentName before copying with fs.copyFileSync, which follows symlinks without containment checks, allowing malicious agents to disclose arbitrary host files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| nanocoai | nanoclaw | < 2.1.17 | 2.1.17 |
References
- Pull Request issue-tracking patch
- Patch Commit patch
- https://www.vulncheck.com/advisories/nanoclaw-arbitrary-file-read-via-symlink-following-in-forwardattachedfiles third-party-advisory