Read the docs
TI-2026-62432 Aliases CVE-2026-92576GHSA-mpqf-rmwr-h7wr

HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool

Priority HIGH 79CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-918 and the CVSS impact.

Summary

HKUDS nanobot before 0.3.0 contains a server-side request forgery vulnerability in the WebFetchTool component where the _validate_url() function fails to block internal IP ranges and private addresses. Attackers can send messages instructing the bot to fetch cloud metadata endpoints, localhost services, and RFC 1918 addresses to extract IAM credentials and internal service data.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00445 38th percentileScored 2026-11-07
Fix Fixed nanobot (HKUDS): 0.3.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
HKUDSnanobotbefore 0.3.00.3.0Patch availableCNA
  • nanobot VendorHKUDS Affected before 0.3.0 Fixed in 0.3.0 Patch available CNA

Remediation

  • Fix · CNA nanobot (HKUDS) Fixed in 0.3.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-92576
  2. 2026-10-03 Alias added: GHSA-mpqf-rmwr-h7wr

References

Advisory 1

  • TI-2026-44237 LightRAG: Missing Authentication for Critical API Functions in Default Configuration CVSS 3.1CRITICAL 9.8
  • TI-2026-78721 Missing authentication in HKUDS Vibe-Trading FastAPI server enables RCE CVSS 4.0CRITICAL 9.3
  • TI-2026-44184 Improper authentication in HKUDS LightRAG CVSS 4.0CRITICAL 9.3
  • TI-2026-26034 Zero-Click Indirect Prompt Injection and Authentication Bypass via Email Polling CVSS 4.0HIGH 8.9
  • TI-2026-25310 DeepCode 1.2.0 Path Traversal via SPA Catch-All Route in main.py CVSS 4.0HIGH 8.7
  • TI-2026-27692 nanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update) CVSS 3.1CRITICAL 9.3
See all 47 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences