CVE-2026-19245

Received Received - Intake

Local Command Injection in HKUDS Nanobot

Publication date: 2026-08-07

Last updated on: 2026-08-07

Assigner: VulDB

Description

A flaw has been found in HKUDS nanobot up to 0.2.1. The impacted element is the function ExecTool._prepare_command of the file nanobot/agent/tools/shell.py of the component Login-shell Environment Handler. Executing a manipulation can lead to information disclosure. The attack requires local access. The exploit has been published and may be used. Upgrading to version 0.3.0 is sufficient to resolve this issue. This patch is called 4525. The affected component should be upgraded. Multiple issues were reported to the project. They reacted with a high level of professionalism and kindness: "The report concerns shell startup files reintroducing environment variables when command execution defaults to a login shell. The default was changed so exec does not use a login shell unless explicitly requested".

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-07

Last Modified

2026-08-07

Generated

2026-08-08

AI Q&A

2026-08-08

EPSS Evaluated

N/A

NVD

CVE-2026-19245

Affected Vendors & Products

Vendor	Product	Version / Range
hkuds	nanobot	to 0.2.1 (inc)
hkuds	nanobot	0.3.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability is in HKUDS nanobot up to version 0.2.1. It involves the function ExecTool._prepare_command in the file nanobot/agent/tools/shell.py. The flaw allows manipulation that can lead to information disclosure. The attack requires local access and has been publicly disclosed. Upgrading to version 0.3.0 fixes the issue.

Detection Guidance

This vulnerability requires local access and is related to shell startup files reintroducing environment variables. Check for HKUDS nanobot versions up to 0.2.1 using commands like 'pip show hkuds-nanobot' or 'dpkg -l | grep nanobot'. Inspect shell startup files (e.g., .bashrc, .profile) for suspicious environment variable manipulations.

Impact Analysis

An attacker with local access could exploit this to disclose sensitive information. The impact is limited as it requires direct access to the system and does not allow code execution or privilege escalation. The risk is low but should still be addressed by upgrading.

Compliance Impact

This vulnerability could potentially lead to unauthorized information disclosure, which may violate GDPR or HIPAA if sensitive personal or health data is exposed. Organizations should patch to prevent compliance violations.

Mitigation Strategies

Upgrade HKUDS nanobot to version 0.3.0 or later immediately. This patch (4525) resolves the issue by changing the default behavior to avoid login shell execution unless explicitly requested.

Hi! I’m here to help you understand CVE-2026-19245. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70