Is CVE-2026-90807 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-90807 being exploited in the wild.

How severe is CVE-2026-90807?

Medium severity, with a CVSS score of 6.3, published 14 September 2026.

Which products and versions are affected?

nanocoai NanoClaw up to 2.1.17.

Is there a fix for CVE-2026-90807?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-90807 attacked?

It is attacked over the network.

Am I affected by CVE-2026-90807?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-90807: NanoClaw symlink/link following in attachment handler

CVE-2026-90807 · Severity: medium · CVSS 6.3 · Published 2026-09-14

NanoClaw is a containerized agent platform that connects to messaging services like WhatsApp and Slack. A flaw in the attachment handler allows remote attackers to manipulate file paths and follow symlinks, potentially exposing or overwriting arbitrary files on the system without requiring authentication.

Quick answers

Is CVE-2026-90807 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-90807 being exploited in the wild.
How severe is CVE-2026-90807?: Medium severity, with a CVSS score of 6.3, published 14 September 2026.
Which products and versions are affected?: nanocoai NanoClaw up to 2.1.17.
Is there a fix for CVE-2026-90807?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-90807 attacked?: It is attacked over the network.
Am I affected by CVE-2026-90807?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A link-following vulnerability exists in the forwardAttachedFiles function of src/modules/agent-to-agent/agent-route.ts in the Attachment Handler component. The vulnerability allows an attacker to manipulate file path inputs to cause the application to follow symbolic links or traverse directories, leading to unauthorized file access or modification. The attack is remotely exploitable and requires no authentication. A patch is available as commit 3f9ed607b7e7a4872747295f75286f1c377d7c33.

Affected products

nanocoai NanoClaw up to 2.1.17

Timeline

2026-09-14: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.