CVE-2026-7875 NanoClaw Host/Container Filesystem Boundary Vulnerability via Outbound Attachment Handling
Attackers can read arbitrary host files or delete paths outside the outbox directory via crafted messages or symlinks in NanoClaw.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-7875?
CVE-2026-7875 is a critical path traversal vulnerability in Qwibit NanoClaw, published on 6 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromised or prompt-injected container to read files outside the intended outbox directory by supplying crafted messages_out.id and content.files values or creating symlinked outbox files. Attackers can exploit this vulnerability to trigger host-side reads of arbitrary files and in some cases achieve recursive deletion of paths outside the intended cleanup target.
Weakness: CWE-22
Which versions are affected by CVE-2026-7875?
It affects 1 product.
Products include Nanoco Nanoclaw.
How do I fix CVE-2026-7875?
No fix has been published for CVE-2026-7875 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-7875 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-7875 exists.
Sources
Also known as GHSA-42p7-cwm7-4cjg.