NanoClaw versions 1.2.0 and earlier contain a CWE-22 path traversal vulnerability in the handling of outbound attachments and outbox cleanup. By supplying specially crafted messages_out.id and content.files values or creating symbolic links in the outbox, an attacker with limited privileges inside a container can cause the host system to read arbitrary files outside the designated outbox directory. Additionally, this flaw may allow recursive deletion of files outside the intended cleanup target. The vulnerability impacts confidentiality, integrity, and availability, as reflected in the CVSS 3.1 base score of 8.8 (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). No vendor advisory or patch is currently provided, and the product is not a cloud service.

Exploitation of this vulnerability can lead to unauthorized disclosure of sensitive host files, modification or deletion of critical data outside the intended directory, and potential disruption of service due to recursive deletion. The vulnerability affects confidentiality, integrity, and availability of the host system. The attack requires local access with low privileges and no user interaction, but can cause systemic impact due to the container-to-host boundary bypass.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the container environment to trusted users only and monitor for suspicious activity related to outbox file manipulation. Avoid using vulnerable versions in sensitive environments.