Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

nanoclaw

A path traversal vulnerability exists in nanocoai NanoClaw up to version 2.0.64, specifically in the send_file component within the file container/agent-runner/src/mcp-tools/core.ts. This vulnerability can be exploited remotely without authentication. The issue has been publicly disclosed, but the project has not yet responded or issued a fix.

CVE-2026-18991 describes a path traversal vulnerability in nanocoai NanoClaw affecting versions up to 2.0.64. The flaw resides in the send_file component of the file container/agent-runner/src/mcp-tools/core.ts, allowing an attacker to manipulate file paths remotely. This vulnerability is categorized under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory). The vulnerability has a CVSS 3.1 base score of 7.3, indicating a moderate severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability. The vulnerability has been publicly disclosed, but no patch or vendor response is currently available.

Detailed information about A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. (CVE-2026-18991). Get real-time updates, technical deta

A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. (CVE-2026-18991) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-18991: Path Traversal in nanocoai NanoClaw

CVE-2026-18991 is a path traversal vulnerability in nanocoai NanoClaw affecting versions up to 2.0.64. The flaw exists in the send_file component of the file container/agent-runner/src/mcp-tools/core.ts. This vulnerability allows remote attackers to manipulate file paths, potentially accessing unauthorized files. The issue was publicly disclosed and an exploit is available, but the vendor has not yet responded or provided a fix.

This vulnerability in nanocoai NanoClaw (up to version 2.0.64) involves a path traversal flaw in the send_file component located in container/agent-runner/src/mcp-tools/core.ts. Remote attackers can exploit this flaw by manipulating file paths to access files outside the intended directory. The vulnerability was reported early to the project, but no official response or remediation has been issued. Public exploit code exists, increasing the risk of exploitation.

Detailed information about CVE-2026-18991: Path Traversal in nanocoai NanoClaw affecting nanocoai NanoClaw. Get real-time updates, technical details, and mitiga

CVE-2026-18991: Path Traversal in nanocoai NanoClaw - Live Threat Intelligence - Threat Radar | OffSeq.com


CVE-2026-18991: Path Traversal in nanocoai NanoClawCVE-2026-18991 0 A path traversal vulnerability exists in nanocoai NanoClaw up to version 2.0.64, specifically in the send_file component within the file container/agent-runner/src/mcp-tools/core.ts. This vulnerability can be exploited remotely without authentication. The issue has been publicly disclosed, but the project has not yet responded or issued a fix. MediumVulnerability#gcve #osv #ghsa-q94p-g4rh-r9rf Join the discussion	GCVE Database	08/06/2026, 02:30:13 UTC Added: 08/06/2026, 18:17:15 UTC
CVE-2026-18991: Path Traversal in nanocoai NanoClawCVE-2026-18991 0 CVE-2026-18991 is a path traversal vulnerability in nanocoai NanoClaw affecting versions up to 2.0.64. The flaw exists in the send_file component of the file container/agent-runner/src/mcp-tools/core.ts. This vulnerability allows remote attackers to manipulate file paths, potentially accessing unauthorized files. The issue was publicly disclosed and an exploit is available, but the vendor has not yet responded or provided a fix. MediumVulnerability#cve #cve-2026-18991 Join the discussion	CVE Database V5	08/06/2026, 02:30:13 UTC Added: 08/06/2026, 12:52:07 UTC

Threats Tagged 'cve-2026-18991'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-18991'

Lead Pen Test Professional