Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromised or prompt-injected container to read files outside the intended outbox directory by supplying crafted messages_out.id and content.files values or creating symlinked outbox files. Attackers can exploit this vulnerability to trigger host-side reads of arbitrary files and in some cases achieve recursive deletion of paths outside the intended cleanup target.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-7875 NanoClaw contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromised or prompt-injected con… https://www.cve.org/CVERecord?id=CVE-2026-7875
Post summary
The text announces CVE-2026-7875, describing a filesystem boundary flaw in NanoClaw’s outbound attachment handling, without providing PoC, exploit, patch, or evidence of active exploitation.
🚨*CVE* CVE-2026-7875 NanoClaw contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromised or prompt-injected con… https://www.cve.org/CVERecord?id=CVE-2026-7875 ----- Traducción: CVE-2026-7875 Nan… http://infoflow.cloud`
Post summary
The tweet simply announces CVE-2026-7875, describing a filesystem boundary issue in NanoClaw’s outbound attachment handling and outbox cleanup, without indicating PoC, exploit code, active use, patch, or false‑positive status.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nanoco | nanoclaw | - | - | - |