A vulnerability categorized as critical has been discovered in Qwibit NanoClaw. This affects an unknown part of the component Message Handler. The manipulation of the argument messages_out.id/content.files results in path traversal.

This vulnerability is reported as CVE-2026-7875. The attack requires a local approach. No exploit exists.

It is advisable to implement a patch to correct this issue.