https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:35:22.919063+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-17434 CVE-2026-17434 — nanocoai NanoClaw add_mcp_server request.ts handleAddMcpServer improper authorization 2026-10-07T16:35:22.935127+00:00

Affected: nanocoai NanoClaw

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component add_mcp_server. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been published and may be used. This patch is called e5b928783d5c485637565eb07d2967922dfbf8d8. A patch should be applied to remediate this issue.