CVE-2026-90809

A vulnerability was identified in HKUDS nanobot up to 0.2.1. The affected element is the function ExecTool.guardcommand/ExecTool.spawn of the file nanobot/agent/tools/shell.py of the component ExecTool. Such manipulation leads to argument injection. It is possible to launch the attack remotely. T...

CVE-2026-90809

HKUDS nanobot (versions up to 0.2.1) is affected by an argument injection vulnerability in the ExecTool component, specifically in the ExecTool._guard_command and ExecTool._spawn functions within nanobot/agent/tools/shell.py. The flaw allows a remote attacker with no privileges or user interactio...

CVE-2026-90808

HKUDS nanobot versions up to 0.2.1 contain an incomplete blacklist vulnerability in the ExecTool component, specifically in the _guard_command/_spawn functions within nanobot/agent/tools/shell.py. An attacker with low privileges can exploit this remotely (no user interaction required) to achieve ...

CVE-2026-90808 HKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklist

A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool.guardcommand/ExecTool.spawn of the file nanobot/agent/tools/shell.py of the component ExecTool. This manipulation causes incomplete blacklist. It is possible to initiate the attack remotely. Patch name:...