Threats tagged 'ghsa-vwc9-2889-5p3f'

A vulnerability exists in HKUDS nanobot up to version 0.2.1 affecting the ExecTool component's functions _guard_command and _spawn in the nanobot/agent/tools/shell.py file. This flaw causes an incomplete blacklist, allowing potential remote attacks. A patch identified by commit af582246f141311d574551b7571a517bcc3df750 is recommended to fix the issue. The vulnerability has a medium severity with a CVSS score of 6.3.