Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

nanocoai/nanoclaw

              main @ add6145
            

Fixes

CVEs

HIGH

Peak severity

22.6%

Coverage

Highlights

Auth Bypass: 12 prior fixes. Scrutinize any change in this area.

src/index.ts: most-fixed (3 issues). Treat as high-risk during review.

27 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Malicious agent containers can write or read files outside their designated session workspaces using directory traversal sequences or symlinks in outbound attachments. This vulnerability is tracked under CVE-2026-7875.

Auth Bypass: Agent containers could bypass cross-group isolation and manipulate other sessions by providing arbitrary target JIDs or identifiers in untrusted IPC payloads. Fixes enforced resolving target session info exclusively from the host's trusted state.

Command Injection: Execution of system commands via unsanitized string interpolation or unvalidated arguments inside shell execution blocks enabled command injection during container runtime setup, verification, and WhatsApp authentication.