NanoClaw suffers from a CWE-22 path traversal vulnerability in its handling of outbound attachments and outbox cleanup processes. By supplying specially crafted messages_out.id and content.files values or by creating symlinked outbox files, an attacker with limited privileges inside a container can cause the host system to read arbitrary files outside the designated outbox directory. Additionally, this flaw may allow recursive deletion of files outside the intended cleanup target, escalating the impact. The vulnerability requires local access with low privileges and no user interaction, and it affects version 7814e45 of NanoClaw. The CVSS 3.1 vector indicates low attack complexity but high impact on confidentiality, integrity, and availability. No official patch or remediation level has been published by the vendor.

Successful exploitation can lead to unauthorized disclosure of sensitive host files and potential deletion of files outside the intended directory, impacting confidentiality, integrity, and availability of the host system. The vulnerability allows an attacker with limited privileges inside a container to escalate their impact on the host filesystem. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected NanoClaw version and monitor for suspicious activity related to outbound attachment handling. Avoid running untrusted containers with access to the outbox directory or host filesystem areas that could be targeted. Follow vendor advisories closely for updates on patches or mitigations.