fix(security): reject symlinks on ~/.nemoclaw to prevent credential hijack - #1996

Closed

ericksoa wants to merge 2 commits into

mainfrom

fix/symlink-attack-nemoclaw-dir

Commits on Apr 17, 2026

fix(security): reject symlinks on ~/.nemoclaw to prevent credential write hijack

ericksoa
and
claude
committed
b6bc1f0
fix(security): walk ancestor paths in symlink check, don't swallow symlink errors

ericksoa
and
claude
committed
0abd347