What happened
NVD published CVE-2026-17433 (CVSS 5.0, Medium) on 2026-07-26, describing an improper-authorization vulnerability in NanoClaw's MCP server approval bridge that could allow a local attacker to bypass approval controls for MCP tool/server registration.
Why it matters
MCP server approval gates are the primary control preventing an agent from silently gaining new tool capabilities; a bypass here means an attacker with local access could get unapproved MCP servers/tools registered into a running agent session, expanding its capability surface without user consent — though the local-access requirement limits blast radius to a single niche project.
Attack vector
The createChatSdkBridge.setup function in src/channels/chat-sdk-bridge.ts (MCP Server Approval component) contains an improper-authorization flaw. Exploitation requires local access, per the NVD record, and manipulation of the approval flow could allow an MCP server to be approved/invoked without proper authorization checks.
Affected systems
nanocoai NanoClaw up to 2.0.64
Mitigation
Monitor the nanocoai/nanoclaw repository for a patched release; restrict local access to hosts running NanoClaw until a fix is available.