← Back to CVE Explorer

CVE-2026-19243

Full vulnerability record from the local CVENow database.

Description

A security vulnerability has been detected in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool._guard_command/ExecTool._spawn of the file nanobot/agent/tools/shell.py of the component Shell Allowlist Handler. Such manipulation leads to os command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.3.0 is recommended to address this issue. The name of the patch is 4562. It is advisable to upgrade the affected component. Multiple issues were reported to the project. They reacted with a high level of professionalism and kindness: "These five reports are variants of the same root cause: validation of shell commands containing multiple segments, wrappers, comments, or chained commands. The issue was fixed by validating every executable shell segment against the configured allowlist".

Severity
LOW
CVSS score
2.1 (v4.0)
Vulnerability status
Deferred
Source identifier
[email protected]
Published
2026-08-07 20:16:50.913000
Last modified
2026-10-23 20:10:00.160000
View original CVE JSON 
{
  "id": "CVE-2026-19243",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-07T20:16:50.913",
  "lastModified": "2026-10-23T20:10:00.160",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A security vulnerability has been detected in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool._guard_command/ExecTool._spawn of the file nanobot/agent/tools/shell.py of the component Shell Allowlist Handler. Such manipulation leads to os command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 0.3.0 is recommended to address this issue. The name of the patch is 4562. It is advisable to upgrade the affected component. Multiple issues were reported to the project. They reacted with a high level of professionalism and kindness: \"These five reports are variants of the same root cause: validation of shell commands containing multiple segments, wrappers, comments, or chained commands. The issue was fixed by validating every executable shell segment against the configured allowlist\"."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de seguridad ha sido detectada en HKUDS nanobot hasta la versión 0.2.1. Afectada está la función ExecTool._guard_command/ExecTool._spawn del archivo nanobot/agent/tools/shell.py del componente Shell Allowlist Gestor. Dicha manipulación conduce a inyección de comandos del SO. El ataque puede ser ejecutado remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. Actualizar a la versión 0.3.0 es recomendado para abordar este problema. El nombre del parche es 4562. Es aconsejable actualizar el componente afectado. Múltiples problemas fueron reportados al proyecto. Reaccionaron con un alto nivel de profesionalismo y amabilidad: ’Estos cinco informes son variantes de la misma causa raíz: validación de comandos de shell que contienen múltiples segmentos, envoltorios, comentarios o comandos encadenados. El problema se solucionó validando cada segmento de shell ejecutable contra la lista de permitidos configurada’."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "HKUDS",
          "product": "nanobot",
          "cpes": [
            "cpe:2.3:a:nanobot:nanobot:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Shell Allowlist Handler"
          ],
          "versions": [
            {
              "version": "0.2.0",
              "status": "affected"
            },
            {
              "version": "0.2.1",
              "status": "affected"
            },
            {
              "version": "0.3.0",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "baseScore": 2.1,
          "baseSeverity": "LOW",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "LOW",
          "vulnAvailabilityImpact": "LOW",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "PROOF_OF_CONCEPT",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
          "baseScore": 6.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.4
      }
    ],
    "cvssMetricV2": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "baseScore": 6.5,
          "accessVector": "NETWORK",
          "accessComplexity": "LOW",
          "authentication": "SINGLE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "availabilityImpact": "PARTIAL"
        },
        "baseSeverity": "MEDIUM",
        "exploitabilityScore": 8.0,
        "impactScore": 6.4,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-11T01:10:00.887794Z",
          "id": "CVE-2026-19243",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-77"
        },
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://gist.github.com/YLChen-007/8fcbf8e49e7be568e1a92e9e0414fdba",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/HKUDS/nanobot/",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/HKUDS/nanobot/issues/4521",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/HKUDS/nanobot/pull/4562",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/HKUDS/nanobot/releases/tag/v0.3.0",
      "source": "[email protected]"
    },
    {
      "url": "https://vuldb.com/cve/CVE-2026-19243",
      "source": "[email protected]"
    },
    {
      "url": "https://vuldb.com/submit/865112",
      "source": "[email protected]"
    },
    {
      "url": "https://vuldb.com/submit/865114",
      "source": "[email protected]"
    },
    {
      "url": "https://vuldb.com/submit/865115",
      "source": "[email protected]"
    },
    {
      "url": "https://vuldb.com/submit/865119",
      "source": "[email protected]"
    },
    {
      "url": "https://vuldb.com/submit/865121",
      "source": "[email protected]"
    },
    {
      "url": "https://vuldb.com/vuln/386997",
      "source": "[email protected]"
    },
    {
      "url": "https://vuldb.com/vuln/386997/cti",
      "source": "[email protected]"
    }
  ]
}