{"id":"CVE-2026-7875","title":"NanoClaw Host/Container Filesystem Boundary Vulnerability via Outbound Attachment Handling","summary":"NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromised or prompt-injected container to read files outside the intended out…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-22"],"vendor":"Qwibit","product":"NanoClaw","affected":["NanoClaw <= 1.2.0"],"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-05-07T13:46:31.798129Z"},"exploitAvailable":true,"published":"2026-05-06","updated":"2026-11-08","sourceUpdated":"2026-11-08T14:09:05.919Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-7875","references":[{"url":"https://github.com/qwibitai/nanoclaw/pull/2001"},{"url":"https://github.com/qwibitai/nanoclaw/commit/7814e45570edf0024a1a5c2ba9fbc9cb3a49f7f7"},{"url":"https://github.com/qwibitai/nanoclaw/releases/tag/v1.2.0","label":"NanoClaw 1.2.0 Release Notes"}],"tags":["cve.org","exploit-available"],"epss":0.00148,"epssPercentile":0.04,"ingestedAt":"2026-11-08T14:51:22.253Z","slug":"CVE-2026-7875","body":"## Overview\n\nNanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromised or prompt-injected container to read files outside the intended outbox directory by supplying crafted messages_out.id and content.files values or creating symlinked outbox files. Attackers can exploit this vulnerability to trigger host-side reads of arbitrary files and in some cases achieve recursive deletion of paths outside the intended cleanup target.\n\n## Affected\n\n- `NanoClaw <= 1.2.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":60,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[]}