CVE-2026-19244: HKUDS nanobot MCP enabledTools Scope mcp.py connect_mcp_servers access control
A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connectmcpservers of the file nanobot/agent/tools/mcp.py of the component MCP enabledTools Scope Handler. Performing a manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public and may be used. Upgrading to version 0.3.0 is sufficient to fix this issue. The patch is named 4436. You should upgrade the affected component. Multiple issues were reported to the project. They reacted with a high level of professionalism and kindness: "Both reports describe the same root cause: MCP resource and prompt wrappers could be registered outside the intended enabledTools scope. The registration boundary was corrected".
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
HKUDS nanobot (MCP enabledTools Scope Handler)to a version that resolves this vulnerability.Fixed in 0.3.0Patch 4436 - Compensating control
Until upgraded, treat remote access to MCP resource/prompt wrapper registration as untrusted by restricting network/API access so only intended clients can reach the HKUDS nanobot MCP functionality.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19244?
The severity of CVE-2026-19244 is rated as medium with a score of 4.7.
How do I fix CVE-2026-19244?
To fix CVE-2026-19244, update the HKUDS nanobot software to version 0.2.2 or later, which addresses the improper access controls.
What component is affected by CVE-2026-19244?
CVE-2026-19244 affects the MCP enabledTools Scope Handler in the function connect_mcp_servers located in nanobot/agent/tools/mcp.py.
What type of access control vulnerability is present in CVE-2026-19244?
CVE-2026-19244 presents an improper access control vulnerability, allowing unauthorized manipulation.
When was CVE-2026-19244 published?
CVE-2026-19244 was published on August 7, 2026.