CVE-2026-56693 is a privilege escalation vulnerability in nanocoai's nanoclaw product affecting versions before 2.1.17. The issue resides in the create_agent delivery-action handler, which improperly enforces server-side security by relying on client-side checks. This allows confined agent containers to invoke create_agent and perform unauthorized privileged writes to the central database, enabling creation of arbitrary agent groups, container configurations, and destinations beyond their confinement scope. The vulnerability has not been confirmed exploited in the wild and no official remediation or patch has been documented yet.

An attacker controlling a confined agent container can escalate privileges by creating arbitrary agent groups, container configurations, and destinations. This breaks the intended confinement boundary, potentially allowing unauthorized access or control over broader system components managed by nanoclaw. The vulnerability impacts the integrity and security of the central database and the overall container management environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the create_agent delivery-action handler and limit privileges of confined agent containers as much as possible to reduce risk.