HKUDS nanobot versions prior to 0.3.0 contain an SSRF vulnerability in the WebFetchTool component. The vulnerability arises because the _validate_url() function fails to restrict requests to internal IP ranges and private addresses. Exploiting this, an attacker can coerce the bot into making unauthorized requests to internal network resources, including cloud metadata services and localhost endpoints, which may lead to disclosure of sensitive credentials and internal data.

Successful exploitation can lead to unauthorized access to internal cloud metadata endpoints and local services, potentially exposing IAM credentials and sensitive internal service information. This can facilitate further attacks within the internal network or cloud environment. The CVSS 4.0 score of 9.2 reflects a critical severity with high impact on confidentiality and system control without requiring privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable component and monitor for unusual requests that attempt to access internal IP ranges. Avoid exposing the WebFetchTool component to untrusted inputs. Follow vendor advisories for updates on patches or temporary mitigations.