Based on the description, the vulnerability appears to allow an attacker to manipulate path arguments to core.ts. This manipulation could lead to reading or modifying files outside the intended directory, though that specific impact is inferred from the wording rather than explicitly confirmed. The flaw aligns with CWE‑22 where the application fails to validate or sanitize file paths. An attacker could remotely supply malicious input, potentially exposing sensitive files or corrupting data.

The affected vendor and product is nanocoai NanoClaw, versions up to 2.0.64. The vulnerability resides in the file container/agent‑runner/src/mcp‑tools/core.ts within the send_file component. No other versions or components were listed as affected.

The CVSS score of 6.9 rates the vulnerability as moderate. The EPSS score is not available, and the flaw is not listed in CISA KEV. The attack can be performed remotely, with the exploit already disclosed publicly, implying a realistic threat. Because the flaw involves plain remote file access, an attacker with network access to NanoClaw services could read or alter critical files if the input is not validated, representing a significant security risk.