Threats tagged 'ghsa-7hvv-vr32-8c2m'

A vulnerability in HKUDS nanobot up to version 0.2.1 allows remote argument injection via the ExecTool._guard_command and ExecTool._spawn functions in the nanobot/agent/tools/shell.py component. This flaw can be exploited remotely and has a CVSS score of 7.3, indicating a medium severity. A patch identified by commit af582246f141311d574551b7571a517bcc3df750 is available to address this issue. Applying this patch is recommended to mitigate the vulnerability.