CVE-2026-90808: HKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklist
A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool.guardcommand/ExecTool.spawn of the file nanobot/agent/tools/shell.py of the component ExecTool. This manipulation causes incomplete blacklist. It is possible to initiate the attack remotely. Patch name: af582246f141311d574551b7571a517bcc3df750. Applying a patch is the recommended action to fix this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
HKUDS nanobotto a version that resolves this vulnerability.Fixed in 0.2.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch af582246f141311d574551b7571a517bcc3df750 - Compensating control
Because the vulnerability is in remote execution paths (ExecTool._guard_command/ExecTool._spawn in nanobot/agent/tools/shell.py ExecTool shell.py), restrict remote access to the component’s ExecTool/agent functionality (e.g., limit who can reach the service over the network).
Event History
Frequently Asked Questions
Which deployments should be prioritized for review?
HKUDS nanobot deployments using the ExecTool component in nanobot/agent/tools/shell.py, including versions up to 0.2.1, should be reviewed. The issue can be initiated remotely.
What level of access does an attacker need?
The available severity vector indicates that an attacker needs network access and low privileges. No user interaction is required.
Is a default configuration known to be affected?
The provided data does not state whether the vulnerable ExecTool functionality is enabled or reachable in a default configuration.
What should be done if the deployment is affected?
Apply patch af582246f141311d574551b7571a517bcc3df750. The provided data identifies patching as the recommended remediation.
How can I identify potentially affected instances?
Check whether the deployment uses HKUDS nanobot's ExecTool implementation at nanobot/agent/tools/shell.py and whether it is running a version up to 0.2.1. The supplied information does not provide indicators of compromise or a detection method for successful exploitation.