https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T11:40:52.409265+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-90808 CVE-2026-90808 — HKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklist 2026-09-30T11:40:52.856169+00:00

Affected: HKUDS nanobot

A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool._guard_command/ExecTool._spawn of the file nanobot/agent/tools/shell.py of the component ExecTool. This manipulation causes incomplete blacklist. It is possible to initiate the attack remotely. Patch name: af582246f141311d574551b7571a517bcc3df750. Applying a patch is the recommended action to fix this issue.