CVE-2026-19005: nanocoai NanoClaw Child-Agent Creation create-agent.ts handleCreateAgent privileges management
A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent of the file src/modules/agent-to-agent/create-agent.ts of the component Child-Agent Creation. Performing a manipulation results in improper privilege management. Remote exploitation of the attack is possible. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19005?
CVE-2026-19005 has a medium severity score of 6.3.
How do I fix CVE-2026-19005?
To fix CVE-2026-19005, update nanocoai NanoClaw to version 2.0.65 or later.
What components are affected by CVE-2026-19005?
CVE-2026-19005 affects the Child-Agent Creation component in the nanocoai NanoClaw application.
What does CVE-2026-19005 exploit?
CVE-2026-19005 exploits improper privilege management in the handleCreateAgent function.
What type of vulnerability is CVE-2026-19005?
CVE-2026-19005 is a remote exploitation vulnerability that can lead to unauthorized actions.