Threat Intelligence Database

CVE-2026-19246 is a server-side request forgery (SSRF) vulnerability in the HKUDS nanobot software up to version 0.2.1. It affects the _download_image_data_url function in the image_generation.py file, specifically the Provider-returned Image URL Handler component. The vulnerability allows remote attackers to manipulate server requests. A patch is available on the main branch and planned for release in version 0.3.1. The CVSS 4.0 score rates this vulnerability as medium severity (5.3).

CVE-2026-19245 is an information disclosure vulnerability in the HKUDS nanobot software up to version 0.2.1. The flaw exists in the ExecTool._prepare_command function within the Login-shell Environment Handler component. It requires local access to exploit and involves shell startup files reintroducing environment variables when command execution defaults to a login shell. The issue is resolved by upgrading to version 0.3.0, which changes the default so that exec does not use a login shell unless explicitly requested.

CVE-2026-19244 is a medium severity vulnerability in HKUDS nanobot versions 0.2.0 and 0.2.1. It involves improper access controls in the connect_mcp_servers function within the MCP enabledTools Scope Handler component. The vulnerability allows remote attackers to manipulate the system due to incorrect registration boundaries of MCP resource and prompt wrappers. The issue is fixed in version 0.3.0.

CVE-2026-19243 is a medium severity OS command injection vulnerability in HKUDS nanobot versions 0.2.0 and 0.2.1. It affects the ExecTool._guard_command and ExecTool._spawn functions in the Shell Allowlist Handler component, allowing remote attackers to execute arbitrary OS commands. The vulnerability arises from insufficient validation of shell commands containing multiple segments, wrappers, comments, or chained commands. The issue has been fixed in version 0.3.0 by validating every executable shell segment against a configured allowlist. No known exploits are reported in the wild.