Login Request a demo
NA
Product
nanobot
by HKUDS · last CVE Sep 16, 2026
8
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 3High 3Medium 2Low 0
Severity
All severities8Critical3High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add nanobot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-2577
10.0
1%
Feb 16
Nanobot Unauthenticated WhatsApp Session Hijack via WebSocket Bridge
Affected: before 0.1.3.Post7
CVE-2026-33654
9.8
1%
Mar 27
Zero-Click Indirect Prompt Injection and Authentication Bypass via Email Polling
Affected: < 0.1.4.post6
CVE-2026-35589
9.3
0%
Apr 14
nanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update)
Affected: < 0.1.5
CVE-2026-48716
8.7
0%
Jun 18
nanobot: Path traversal via unsanitized WhatsApp document fileName enables arbitrary file write
Affected: <= 0.1.5.post3
CVE-2026-92576
8.6
0%
Sep 16
HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool
Affected: before 0.3.0
CVE-2026-49139
7.0
0%
Jun 1
Nanobot < 0.2.1 SSRF via Microsoft Teams Channel serviceUrl Poisoning
Affected: before 0.2.1
CVE-2026-49138
5.0
0%
Jun 1
Nanobot < 0.2.1 SSRF via web_fetch Tool Redirect Following
Affected: before 0.2.1
CVE-2026-49140
4.3
0%
Jun 1
Nanobot < 0.2.1 Denial of Service via Matrix Media Download Handler
Affected: before 0.2.1
Showing 8