CVE-2026-19244

Received Received - Intake

Improper Access Control in HKUDS Nanobot MCP Tools

Publication date: 2026-08-07

Last updated on: 2026-08-07

Assigner: VulDB

Description

A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connect_mcp_servers of the file nanobot/agent/tools/mcp.py of the component MCP enabledTools Scope Handler. Performing a manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public and may be used. Upgrading to version 0.3.0 is sufficient to fix this issue. The patch is named 4436. You should upgrade the affected component. Multiple issues were reported to the project. They reacted with a high level of professionalism and kindness: "Both reports describe the same root cause: MCP resource and prompt wrappers could be registered outside the intended enabledTools scope. The registration boundary was corrected".

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-07

Last Modified

2026-08-07

Generated

2026-08-08

AI Q&A

2026-08-08

EPSS Evaluated

N/A

NVD

CVE-2026-19244

EUVD

EUVD-2026-54652

Affected Vendors & Products

Vendor	Product	Version / Range
hkuds	nanobot	to 0.2.1 (inc)
hkuds	nanobot	0.3.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-266	A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability is in HKUDS nanobot up to version 0.2.1, specifically in the function connect_mcp_servers within the MCP enabledTools Scope Handler. It allows improper access controls due to a manipulation, enabling remote attacks. The issue arises because MCP resource and prompt wrappers could be registered outside the intended enabledTools scope, which was corrected in version 0.3.0.

Detection Guidance

This vulnerability is specific to HKUDS nanobot up to version 0.2.1 and involves improper access controls in the MCP enabledTools scope handler. To detect it, check the installed version of nanobot with: pip show nanobot. If the version is 0.2.1 or lower, the system is vulnerable. Additionally, inspect the file nanobot/agent/tools/mcp.py for the function connect_mcp_servers to verify if it allows unauthorized MCP server connections outside the intended scope.

Impact Analysis

The vulnerability allows remote attackers to bypass access controls, potentially gaining unauthorized access to sensitive functions or data within the nanobot system. This could lead to data breaches, unauthorized actions, or further exploitation depending on the system's configuration and usage.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating compliance requirements under GDPR and HIPAA. Improper access controls may result in data breaches, triggering legal penalties, fines, or reputational damage for organizations handling regulated data.

Mitigation Strategies

Upgrade HKUDS nanobot to version 0.3.0 or later to fix the improper access controls in the MCP enabledTools Scope Handler. The patch named 4436 addresses the root cause where MCP resource and prompt wrappers could be registered outside the intended enabledTools scope.

Hi! I’m here to help you understand CVE-2026-19244. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70