{“lastseen”:””,”description”:”NanoClaw contains a host\/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromised or prompt-injected container to read files outside the intended outbox directory by supplying crafted messages_out.id and content.files values or creating symlinked outbox files. Attackers can exploit this vulnerability to trigger host-side reads of arbitrary files and in some cases achieve recursive deletion of paths outside the intended cleanup target.”,”published”:”2026-05-06T16:10:46.270Z”,”modified”:”2026-05-06T16:10:46.270Z”,”type”:”cve”,”title”:”NanoClaw Host\/Container Filesystem Boundary Vulnerability via Outbound Attachment Handling”,”source”:”VulnCheck”,”references”:”https:\/\/github.com\/qwibitai\/nanoclaw\/pull\/2001\\nhttps:\/\/github.com\/qwibitai\/nanoclaw\/commit\/7814e45570edf0024a1a5c2ba9fbc9cb3a49f7f7″,”id”:”CVE-2026-7875″,”bulletinFamily”:””,”cwe”:[“CWE-22″],”cvelist”:null,”sourceData”:”Qwibit NanoClaw 7814e45″,”sourceHref”:””,”cvss”:{“score”:8.8,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:L\/AC:L\/PR:L\/UI:N\/S:C\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”NanoClaw”,”version”:”7814e45″,”vendor”:”Qwibit”,”ai_description”:”Host\/Container Filesystem Boundary Vulnerability via Outbound Attachment Handling”,”ai_severity”:”High”,”ai_vendor”:”Qwibit”,”ai_product”:”NanoClaw”,”ai_version”:”7814e45″,”ai_score”:8.8}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:””,”description”:”NanoClaw contains a host\/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromised or prompt-injected container to read files outside…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,41,12,15,13,7,11,5],"class_list":["post-51736","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-88","tag-exploit","tag-high","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n