Threats tagged 'ghsa-q94p-g4rh-r9rf'

A path traversal vulnerability exists in nanocoai NanoClaw up to version 2.0.64 in the send_file component within the file container/agent-runner/src/mcp-tools/core.ts. This vulnerability allows remote attackers to manipulate file paths, potentially leading to unauthorized access or modification of files. The vulnerability has been publicly disclosed and an exploit may be available. The project has been notified but has not yet responded or issued a fix.