CVE-2026-19246

Received Received - Intake

Server-Side Request Forgery in HKUDS Nanobot

Publication date: 2026-08-07

Last updated on: 2026-08-07

Assigner: VulDB

Description

A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function _download_image_data_url of the file nanobot/providers/image_generation.py of the component Provider-returned Image URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 5095. It is recommended to apply a patch to fix this issue. The vendor explains: "We confirm that provider-returned image URLs required the same SSRF protections applied to other network retrieval paths. (...) The patch is currently available on main and is planned for the next patch release, v0.3.1."

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-07

Last Modified

2026-08-07

Generated

2026-08-08

AI Q&A

2026-08-08

EPSS Evaluated

N/A

NVD

CVE-2026-19246

Affected Vendors & Products

Vendor	Product	Version / Range
hkuds	nanobot	to 0.2.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

Executive Summary

This vulnerability is a server-side request forgery (SSRF) in HKUDS nanobot up to version 0.2.1. It exists in the _download_image_data_url function of the image_generation.py file, specifically in the Provider-returned Image URL Handler component. An attacker can remotely initiate requests to unintended internal systems by manipulating image URLs.

Detection Guidance

This vulnerability involves server-side request forgery (SSRF) in HKUDS nanobot up to 0.2.1. To detect it, monitor outbound network requests from the nanobot service, especially those to internal or unexpected external addresses. Check logs for unusual image URL handling requests in the nanobot/providers/image_generation.py component. Ensure SSRF protections are applied to provider-returned image URLs.

Impact Analysis

The SSRF vulnerability allows attackers to make unauthorized requests from your server to internal or external systems. This could lead to data leakage, unauthorized access to sensitive services, or further exploitation of internal network resources. The impact depends on your server's network configuration and the services it can access.

Compliance Impact

The vulnerability allows server-side request forgery (SSRF) via provider-returned image URLs, which could enable unauthorized network access. This may lead to data exfiltration or unauthorized system interactions, potentially violating GDPR (data protection) or HIPAA (health data security) if sensitive data is exposed or accessed without authorization.

Mitigation Strategies

Apply the patch identified as 5095 to the nanobot component. Update to version 0.3.1 or later where the patch is included. Ensure provider-returned image URLs receive the same SSRF protections as other network retrieval paths.

Hi! I’m here to help you understand CVE-2026-19246. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70