CVE-2026-92576: HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool
HKUDS nanobot before 0.3.0 contains a server-side request forgery vulnerability in the WebFetchTool component where the validateurl() function fails to block internal IP ranges and private addresses. Attackers can send messages instructing the bot to fetch cloud metadata endpoints, localhost services, and RFC 1918 addresses to extract IAM credentials and internal service data.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
HKUDS nanobot versions before 0.3.0 are affected where the WebFetchTool component is available. The provided information does not state whether WebFetchTool is enabled by default.
What does an attacker need to exploit this issue?
An attacker needs to be able to send messages that instruct the bot to fetch a URL. The vulnerability is rated network-reachable, requires low complexity, and requires neither privileges nor user interaction.
What could an attacker access through a successful exploit?
The bot can be induced to request cloud metadata endpoints, localhost services, and RFC 1918 private addresses. This can expose IAM credentials and data from internal services.