Login Request a demo
High severity · published Sep 16, 2026
CVE-2026-92576
HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool
8.6
CVSS
0.4%
EPSS
No
On KEV
Description
HKUDS nanobot before 0.3.0 contains a server-side request forgery vulnerability in the WebFetchTool component where the _validate_url() function fails to block internal IP ranges and private addresses. Attackers can send messages instructing the bot to fetch cloud metadata endpoints, localhost services, and RFC 1918 addresses to extract IAM credentials and internal service data.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
nanobot · HKUDS
before 0.3.0 · source: vendor
Affected product
NA
nanobot
HKUDS
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-92576
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-92576
github.com
https://github.com/HKUDS/nanobot/security/advisories/GHSA-vc5v-6vwm-wf9m
www.vulncheck.com
https://www.vulncheck.com/advisories/hkuds-nanobot-before-0.3.0-server-side-request-forgery-via-webfetchtool
More from nanobot
10.0
CVE-2026-2577
Nanobot Unauthenticated WhatsApp Session Hijack via WebSocket Bridge
9.8
CVE-2026-33654
Zero-Click Indirect Prompt Injection and Authentication Bypass via Email Polling
9.3
CVE-2026-35589
nanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update)
8.7
CVE-2026-48716
nanobot: Path traversal via unsanitized WhatsApp document fileName enables arbitrary file write
7.0
CVE-2026-49139
Nanobot < 0.2.1 SSRF via Microsoft Teams Channel serviceUrl Poisoning