nanobot vulnerabilities | LiveThreat CVE Feed

Product

nanobot

by HKUDS · last CVE Sep 14, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 2High 1Medium 4Low 1

Severity

Exploitation

Watch

Add nanobot to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-33654	9.8	1%	Mar 27	Zero-Click Indirect Prompt Injection and Authentication Bypass via Email Polling Affected: before 0.1.4; 0.1.4; 0.1.4; 0.1.4; 0.1.4; 0.1.4; +1 more
CVE-2026-35589	9.3	0%	Apr 14	nanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update) Affected: before 0.1.5