What’s Vulnerable › Vulnerabilities

CVE-2026-92576: HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-16 · updated 2026-09-17
• Weakness: CWE-918

Description

HKUDS nanobot before 0.3.0 contains a server-side request forgery vulnerability in the WebFetchTool component where the _validate_url() function fails to block internal IP ranges and private addresses. Attackers can send messages instructing the bot to fetch cloud metadata endpoints, localhost services, and RFC 1918 addresses to extract IAM credentials and internal service data.

Affected products

• HKUDS nanobot: before 0.3.0 — fixed in 0.3.0

How to fix

Upgrade to a fixed version: HKUDS nanobot 0.3.0. Check the vendor advisory for mitigations.

References

• https://github.com/HKUDS/nanobot/security/advisories/GHSA-vc5v-6vwm-wf9m
• https://www.vulncheck.com/advisories/hkuds-nanobot-before-0.3.0-server-side-request-forgery-via-webfetchtool
• https://github.com/HKUDS/nanobot/security/advisories/GHSA-vc5v-6vwm-wf9m

Get alerted when CVE-2026-92576 or the next vulnerability affects your stack