← Back to CVE Explorer

CVE-2026-19245

Full vulnerability record from the local CVENow database.

Description

A flaw has been found in HKUDS nanobot up to 0.2.1. The impacted element is the function ExecTool._prepare_command of the file nanobot/agent/tools/shell.py of the component Login-shell Environment Handler. Executing a manipulation can lead to information disclosure. The attack requires local access. The exploit has been published and may be used. Upgrading to version 0.3.0 is sufficient to resolve this issue. This patch is called 4525. The affected component should be upgraded. Multiple issues were reported to the project. They reacted with a high level of professionalism and kindness: "The report concerns shell startup files reintroducing environment variables when command execution defaults to a login shell. The default was changed so exec does not use a login shell unless explicitly requested".

Severity
LOW
CVSS score
1.9 (v4.0)
Vulnerability status
Deferred
Source identifier
[email protected]
Published
2026-08-07 21:17:27.667000
Last modified
2026-10-23 20:10:00.160000
View original CVE JSON 
{
  "id": "CVE-2026-19245",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-07T21:17:27.667",
  "lastModified": "2026-10-23T20:10:00.160",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw has been found in HKUDS nanobot up to 0.2.1. The impacted element is the function ExecTool._prepare_command of the file nanobot/agent/tools/shell.py of the component Login-shell Environment Handler. Executing a manipulation can lead to information disclosure. The attack requires local access. The exploit has been published and may be used. Upgrading to version 0.3.0 is sufficient to resolve this issue. This patch is called 4525. The affected component should be upgraded. Multiple issues were reported to the project. They reacted with a high level of professionalism and kindness: \"The report concerns shell startup files reintroducing environment variables when command execution defaults to a login shell. The default was changed so exec does not use a login shell unless explicitly requested\"."
    },
    {
      "lang": "es",
      "value": "Se ha encontrado un fallo en HKUDS nanobot hasta la versión 0.2.1. El elemento afectado es la función ExecTool._prepare_command del archivo nanobot/agent/tools/shell.py del componente Login-shell Environment Gestor. La ejecución de una manipulación puede llevar a una revelación de información. El ataque requiere acceso local. El exploit ha sido publicado y puede ser utilizado. Actualizar a la versión 0.3.0 es suficiente para resolver este problema. Este parche se llama 4525. El componente afectado debería ser actualizado. Múltiples problemas fueron reportados al proyecto. Reaccionaron con un alto nivel de profesionalidad y amabilidad: ’El informe se refiere a archivos de inicio de shell que reintroducen variables de entorno cuando la ejecución de comandos por defecto utiliza un shell de inicio de sesión. El valor predeterminado se cambió para que exec no utilice un shell de inicio de sesión a menos que se solicite explícitamente’."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "HKUDS",
          "product": "nanobot",
          "cpes": [
            "cpe:2.3:a:nanobot:nanobot:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Login-shell Environment Handler"
          ],
          "versions": [
            {
              "version": "0.2.0",
              "status": "affected"
            },
            {
              "version": "0.2.1",
              "status": "affected"
            },
            {
              "version": "0.3.0",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "baseScore": 1.9,
          "baseSeverity": "LOW",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "NONE",
          "vulnAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "PROOF_OF_CONCEPT",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "baseScore": 3.3,
          "baseSeverity": "LOW",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 1.4
      }
    ],
    "cvssMetricV2": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N",
          "baseScore": 1.7,
          "accessVector": "LOCAL",
          "accessComplexity": "LOW",
          "authentication": "SINGLE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "baseSeverity": "LOW",
        "exploitabilityScore": 3.1,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-10T13:30:28.399321Z",
          "id": "CVE-2026-19245",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        },
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://gist.github.com/YLChen-007/b25f3f185478e0b2cd0e727bf5c5ed9b",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/HKUDS/nanobot/",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/HKUDS/nanobot/issues/4518",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/HKUDS/nanobot/pull/4525",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/HKUDS/nanobot/releases/tag/v0.3.0",
      "source": "[email protected]"
    },
    {
      "url": "https://vuldb.com/cve/CVE-2026-19245",
      "source": "[email protected]"
    },
    {
      "url": "https://vuldb.com/submit/865117",
      "source": "[email protected]"
    },
    {
      "url": "https://vuldb.com/vuln/386999",
      "source": "[email protected]"
    },
    {
      "url": "https://vuldb.com/vuln/386999/cti",
      "source": "[email protected]"
    }
  ]
}