CVE-2026-56693 describes a privilege escalation vulnerability in nanocoai's nanoclaw product before version 2.1.17. The issue resides in the create_agent delivery-action handler, which improperly enforces server-side security by relying on client-side checks. This allows confined agent containers to invoke create_agent to perform privileged writes to the central database without host authorization, enabling the creation of arbitrary agent groups, container configurations, and destinations. This bypasses intended confinement boundaries and escalates privileges beyond the container's restrictions. The vulnerability is rated medium severity with a CVSS 4.0 score of 6.8. No vendor advisory or patch information is currently available.

An attacker controlling a confined agent container can escalate privileges by creating arbitrary agent groups, container configurations, and destinations through the create_agent handler. This bypasses intended confinement boundaries and allows unauthorized privileged central-database writes, potentially compromising the integrity and security of the system's agent management.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the create_agent delivery-action handler to trusted agents only and monitor for unusual agent creation activities. Avoid relying solely on client-side enforcement for server-side security controls.