CVE-2026-19005
Received Received - Intake

Privilege Escalation in NanoClaw Child-Agent Creation

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: VulDB

Description
A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts of the component Child-Agent Creation. Performing a manipulation results in improper privilege management. Remote exploitation of the attack is possible. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-19005
EUVD
EUVD-2026-53717

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
nanocoai nanoclaw to 2.0.64 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-19005 is a privilege escalation flaw in NanoClaw up to version 2.0.64. The vulnerability exists in the handleCreateAgent function of the create-agent.ts file. It allows non-owner members to create persistent child agents without required approval from owners or admins. The function bypasses ownership verification, enabling unauthorized database writes, filesystem initialization, and new agent group creation. Exploitation requires a non-owner member to send a message to an owner-initialized agent group.

Detection Guidance

Check NanoClaw logs for unauthorized agent creation events or database writes. Inspect messages sent to owner-initialized agent groups by non-owner members. Review filesystem changes in agent directories for unexpected new agent groups or persistent child agents.

Impact Analysis

This vulnerability could allow unauthorized users to create child agents, modify system configurations, or access sensitive data. Attackers could escalate privileges, perform unauthorized actions, or disrupt system operations. The impact includes potential data breaches, system compromise, or unauthorized resource consumption. The exploit is publicly available, increasing the risk of real-world attacks.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA requirements for data protection and access controls. Organizations using affected NanoClaw versions may face compliance violations, legal penalties, or data breach notifications. The improper privilege management may result in unauthorized data exposure or modification, undermining security controls required by these regulations.

Mitigation Strategies

Upgrade NanoClaw to the latest version if available. Restrict non-owner member permissions to prevent unauthorized agent creation. Monitor and audit agent group interactions for suspicious activity. Disable owner-initialized groups with elevated cli_scope='global' until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19005. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart