CVE-2026-19243: OS Command Injection in HKUDS nanobot
CVE-2026-19243 is a medium severity OS command injection vulnerability in HKUDS nanobot versions 0.2.0 and 0.2.1. It affects the ExecTool._guard_command and ExecTool._spawn functions in the Shell Allowlist Handler component, allowing remote attackers to execute arbitrary OS commands. The vulnerability arises from insufficient validation of shell commands containing multiple segments, wrappers, comments, or chained commands. The issue has been fixed in version 0.3.0 by validating every executable shell segment against a configured allowlist. No known exploits are reported in the wild.
AI Analysis
Technical Summary
This vulnerability in HKUDS nanobot up to version 0.2.1 involves OS command injection via the ExecTool._guard_command and ExecTool._spawn functions located in nanobot/agent/tools/shell.py. The root cause is improper validation of shell commands that include multiple segments or chained commands, which allows an attacker to inject arbitrary OS commands remotely. The project addressed the issue by implementing validation of each executable shell segment against a configured allowlist, fixing the vulnerability in version 0.3.0. The patch is identified as 4562. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. No active exploitation has been observed.
Potential Impact
Successful exploitation allows remote attackers to execute arbitrary operating system commands on affected systems running HKUDS nanobot versions 0.2.0 and 0.2.1. This could lead to unauthorized system control or data compromise depending on the privileges of the affected process. The medium CVSS score reflects the moderate risk due to remote attack vector and low complexity but limited impact scope.
Mitigation Recommendations
Upgrade HKUDS nanobot to version 0.3.0 or later, where the vulnerability has been fixed by validating each executable shell segment against a configured allowlist. This official fix addresses the root cause of the OS command injection. No additional mitigations are required if the upgrade is applied.
CVE-2026-19243: OS Command Injection in HKUDS nanobot
Description
CVE-2026-19243 is a medium severity OS command injection vulnerability in HKUDS nanobot versions 0.2.0 and 0.2.1. It affects the ExecTool._guard_command and ExecTool._spawn functions in the Shell Allowlist Handler component, allowing remote attackers to execute arbitrary OS commands. The vulnerability arises from insufficient validation of shell commands containing multiple segments, wrappers, comments, or chained commands. The issue has been fixed in version 0.3.0 by validating every executable shell segment against a configured allowlist. No known exploits are reported in the wild.
CVSS v4.0
Score 5.3medium
Affected software
cpe:2.3:a:nanobot:nanobot:*:*:*:*:*:*:*:*Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in HKUDS nanobot up to version 0.2.1 involves OS command injection via the ExecTool._guard_command and ExecTool._spawn functions located in nanobot/agent/tools/shell.py. The root cause is improper validation of shell commands that include multiple segments or chained commands, which allows an attacker to inject arbitrary OS commands remotely. The project addressed the issue by implementing validation of each executable shell segment against a configured allowlist, fixing the vulnerability in version 0.3.0. The patch is identified as 4562. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. No active exploitation has been observed.
Potential Impact
Successful exploitation allows remote attackers to execute arbitrary operating system commands on affected systems running HKUDS nanobot versions 0.2.0 and 0.2.1. This could lead to unauthorized system control or data compromise depending on the privileges of the affected process. The medium CVSS score reflects the moderate risk due to remote attack vector and low complexity but limited impact scope.
Mitigation Recommendations
Upgrade HKUDS nanobot to version 0.3.0 or later, where the vulnerability has been fixed by validating each executable shell segment against a configured allowlist. This official fix addresses the root cause of the OS command injection. No additional mitigations are required if the upgrade is applied.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-08-07T12:06:59.355Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a763509bf8831d5390b0159
Added to database: 08/07/2026, 19:42:01 UTC
Last enriched: 08/07/2026, 20:00:16 UTC
Last updated: 08/07/2026, 21:00:15 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.