Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: HKUDS nanobot 0.2.1 Clear all filters
TI-2026-36354 CVE-2026-49140 · GHSA-4rm2-fq3x-g7x7

Nanobot < 0.2.1 Denial of Service via Matrix Media Download Handler

Priority MEDIUM 57

Nanobot prior to version 0.2.1 contains a denial of service vulnerability in the Matrix channel media download handler that allows authenticated room members to exhaust process memory and bandwidth by sending media event…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00268 Published 2026-06-01 Fixed in 0.2.1 CWE-770
TI-2026-36353 CVE-2026-49139 · GHSA-gv7x-pq3j-c5mj

Nanobot < 0.2.1 SSRF via Microsoft Teams Channel serviceUrl Poisoning

Priority LOW 31

Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the Microsoft Teams channel handler that allows remote attackers to exfiltrate Bot Framework bearer tokens by supplying a forged acti…

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00382 Published 2026-06-01 Fixed in 0.2.1 CWE-918
TI-2026-36352 CVE-2026-49138 · GHSA-434r-7c99-hwf3

Nanobot < 0.2.1 SSRF via web_fetch Tool Redirect Following

Priority MEDIUM 57

Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the web_fetch tool that allows remote attackers to reach internal or private network hosts by supplying a URL that redirects to a loo…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00355 Published 2026-06-01 Fixed in 0.2.1 CWE-918