This vulnerability in nanocoai NanoClaw (up to version 2.0.64) involves a path traversal flaw in the send_file component located in container/agent-runner/src/mcp-tools/core.ts. Remote attackers can exploit this flaw by manipulating file paths to access files outside the intended directory. The vulnerability was reported early to the project, but no official response or remediation has been issued. Public exploit code exists, increasing the risk of exploitation.

Successful exploitation of this path traversal vulnerability can allow remote attackers to read or access files outside the intended directory structure, potentially exposing sensitive information. The vulnerability is remotely exploitable without authentication and requires no user interaction. The CVSS 4.0 base score is 6.9 (medium severity), reflecting the moderate impact and ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or issued a fix, users should monitor official channels for updates. Until a patch is available, consider restricting network access to the affected service and applying compensating controls to limit exposure.