CVE-2026-56692 is a symlink following vulnerability in nanocoai's NanoClaw product before version 2.1.17. The issue exists in the forwardAttachedFiles function, where attachment filenames are validated only by isSafeAttachmentName. The file copy operation uses fs.copyFileSync, which follows symbolic links without verifying containment boundaries. Consequently, container-controlled agents can exploit this to read arbitrary files on the host system, leading to potential data exfiltration. The CVSS 4.0 base score is 6.8 (medium severity), reflecting local attack vector with low complexity and no user interaction required, but requiring low privileges.

An attacker with container-level control can exploit this vulnerability to read arbitrary files on the host system by leveraging symbolic links. This can lead to unauthorized disclosure of sensitive host-readable files. There is no indication of privilege escalation or code execution from the provided data. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch link is provided, users should monitor vendor communications for updates. Until a fix is available, avoid running untrusted container-controlled agents or restrict their file system access to mitigate risk.