agentprime: hkuds-nanobotEvery new CVE for hkuds-nanobot.https://agentprime.io/CVE-2026-92576: HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchToolhttps://agentprime.io/advisories/CVE-2026-92576/https://agentprime.io/advisories/CVE-2026-92576/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 21:46:45 GMTCVEcriticalCVE-2026-90809: HKUDS nanobot ExecTool shell.py ExecTool._spawn argument injectionhttps://agentprime.io/advisories/CVE-2026-90809/https://agentprime.io/advisories/CVE-2026-90809/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 18:15:17 GMTCVECVE-2026-90808: HKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklisthttps://agentprime.io/advisories/CVE-2026-90808/https://agentprime.io/advisories/CVE-2026-90808/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 18:00:10 GMTCVECVE-2026-19246: HKUDS nanobot Provider-returned Image URL image_generation.py _download_image_data_url server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-19246/https://agentprime.io/advisories/CVE-2026-19246/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 21:00:14 GMTCVECVE-2026-19245: HKUDS nanobot Login-shell Environment shell.py ExecTool._prepare_command information disclosurehttps://agentprime.io/advisories/CVE-2026-19245/https://agentprime.io/advisories/CVE-2026-19245/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 20:45:12 GMTCVECVE-2026-19244: HKUDS nanobot MCP enabledTools Scope mcp.py connect_mcp_servers access controlhttps://agentprime.io/advisories/CVE-2026-19244/https://agentprime.io/advisories/CVE-2026-19244/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 20:30:13 GMTCVECVE-2026-19243: HKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injectionhttps://agentprime.io/advisories/CVE-2026-19243/https://agentprime.io/advisories/CVE-2026-19243/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 19:30:13 GMTCVECVE-2026-48716: nanobot: Path traversal via unsanitized WhatsApp document fileName enables arbitrary file writehttps://agentprime.io/advisories/CVE-2026-48716/https://agentprime.io/advisories/CVE-2026-48716/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 18:46:28 GMTCVECVE-2026-49140: Nanobot < 0.2.1 Denial of Service via Matrix Media Download Handlerhttps://agentprime.io/advisories/CVE-2026-49140/https://agentprime.io/advisories/CVE-2026-49140/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 19:54:53 GMTCVECVE-2026-49139: Nanobot < 0.2.1 SSRF via Microsoft Teams Channel serviceUrl Poisoninghttps://agentprime.io/advisories/CVE-2026-49139/https://agentprime.io/advisories/CVE-2026-49139/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 19:50:42 GMTCVECVE-2026-35589: nanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update)https://agentprime.io/advisories/CVE-2026-35589/https://agentprime.io/advisories/CVE-2026-35589/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Apr 2026 22:47:32 GMTCVECVE-2026-33654: Zero-Click Indirect Prompt Injection and Authentication Bypass via Email Pollinghttps://agentprime.io/advisories/CVE-2026-33654/https://agentprime.io/advisories/CVE-2026-33654/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 19:43:49 GMTCVECVE-2026-2577: Nanobot Unauthenticated WhatsApp Session Hijack via WebSocket Bridgehttps://agentprime.io/advisories/CVE-2026-2577/https://agentprime.io/advisories/CVE-2026-2577/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Feb 2026 09:51:11 GMTCVEcritical