NanoClaw: path traversal outside the sandbox
Two filename-validation gaps in host-side attachment handling: an inbound write and an outbound read. The public writeup links both maintainer fixes.
Open the original ↗
Two host-side file boundaries
The investigation covers unsafe filename handling when receiving attachments and sending files back to a chat. These operations ran in the host process, outside the agent’s container.
The public article explains the different prerequisites for each path and the maintainer’s response. These are fixed findings; this page makes no claim about current versions.