This vulnerability affects HKUDS nanobot versions 0.2.0 and 0.2.1 in the ExecTool._prepare_command function of the Login-shell Environment Handler. The flaw involves shell startup files reintroducing environment variables when command execution defaults to a login shell, leading to information disclosure. The default behavior was changed in version 0.3.0 so that exec does not use a login shell unless explicitly requested, mitigating the issue. The vulnerability requires local access and has a CVSS 4.8 (medium) score. Exploit code has been published but no known active exploitation in the wild is reported.

An attacker with local access can exploit this vulnerability to disclose sensitive information due to improper handling of environment variables during command execution in a login shell context. This could lead to leakage of environment data that may assist further attacks or information gathering. The impact is limited to information disclosure and requires local privileges.

Upgrade HKUDS nanobot to version 0.3.0 or later, where the default behavior of exec was changed to not use a login shell unless explicitly requested, thereby preventing the reintroduction of environment variables that cause information disclosure. This official fix fully resolves the issue.