CVE-2026-56402 is a privilege escalation vulnerability in nanocoai's nanoclaw product affecting versions before 2.1.17. The issue arises because the handleApprovalsResponse function does not verify the authorization of the responder's role. Consequently, an attacker possessing a valid questionId can submit approval response payloads to approve or reject privileged operations without proper role validation, potentially leading to unauthorized privilege escalation.

An attacker with limited privileges who can obtain a valid questionId may escalate their privileges by approving or rejecting privileged actions, such as package installations, without authorization checks. This could lead to unauthorized changes in the system's state or configuration, impacting system integrity and security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to valid questionIds and monitor for suspicious approval response submissions related to privileged actions.