Skip to main content
VulnerabilityPublished

ZDI-26-972: Hong Kong University Data Intelligence Lab nanobot WebFetch Server-Side Request Forgery Information Disclosure Vulnerability

Source Zero Day Initiative

0
Severity
Critical

Rated Critical by Zero Day Initiative

Data as of 13 Nov 2026, 20:34 UTC

What to do

AI-suggested

No official fixes or workarounds are provided in the available data.

Description

A server-side request forgery (SSRF) vulnerability in the Hong Kong University Data Intelligence Lab nanobot WebFetch component allows remote attackers to disclose sensitive information. Exploitation requires interaction with the product, and attack vectors may vary based on implementation. The vulnerability has been assigned a high severity rating by the Zero Day Initiative.

References

Community reviews

Loading reviews…