Login Request a demo
NA
Product
nanobot
by HKUDS · last CVE Sep 14, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 1Medium 4Low 1
Severity
All severities8Critical2High1Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add nanobot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33654
9.8
1%
Mar 27
Zero-Click Indirect Prompt Injection and Authentication Bypass via Email Polling
Affected: before 0.1.4; 0.1.4; 0.1.4; 0.1.4; 0.1.4; 0.1.4; +1 more
CVE-2026-35589
9.3
0%
Apr 14
nanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update)
Affected: before 0.1.5
CVE-2026-90809
7.3
1%
Sep 14
HKUDS nanobot ExecTool shell.py ExecTool._spawn argument injection
Affected: 0.2.0; 0.2.1
CVE-2026-90808
6.3
0%
Sep 14
HKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklist
Affected: 0.2.0; 0.2.1
CVE-2026-19246
6.3
0%
Aug 7
HKUDS nanobot Provider-returned Image URL image_generation.py _download_image_data_url server-side request forgery
Affected: 0.2.0; 0.2.1
CVE-2026-19243
6.3
2%
Aug 7
HKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injection
Affected: 0.2.0; 0.2.1
CVE-2026-19244
4.7
0%
Aug 7
HKUDS nanobot MCP enabledTools Scope mcp.py connect_mcp_servers access control
Affected: 0.2.0; 0.2.1
CVE-2026-19245
3.3
0%
Aug 7
HKUDS nanobot Login-shell Environment shell.py ExecTool._prepare_command information disclosure
Affected: 0.2.0; 0.2.1
Showing 8