Threats tagged 'ghsa-qwp6-wxvx-2jc8'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.5%	CVE-2026-19244HKUDS nanobot · CWE-266 Medium5.1EPSS 0.5%2026-08-07GCVE DatabaseCVE-2026-19244 A vulnerability in HKUDS nanobot up to version 0.2.1 affects the connect_mcp_servers function in the MCP enabledTools Scope Handler component. This flaw allows improper access control due to MCP resource and prompt wrappers being registered outside their intended scope. The vulnerability can be exploited remotely. Public exploit code exists. Upgrading to version 0.3.0 resolves the issue. EPSS 0.5%Report on CVE-2026-19244 Vulnerability CWE-266 #ghsa-qwp6-wxvx-2jc8	GCVE Database	2026-08-07

Page 1 of 1