Vulnerability · Published Sep 16, 2026 · Assigned by VulnCheck

CVE-2026-92576HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool

High 8.6

In plain English

A high-severity server-side request forgery in nanobot from HKUDS. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).

Severity (CVSS 3.1)8.6High

Exploit odds (30 days)0.4%top 61.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

HKUDS nanobot before 0.3.0 contains a server-side request forgery vulnerability in the WebFetchTool component where the _validate_url() function fails to block internal IP ranges and private addresses. Attackers can send messages instructing the bot to fetch cloud metadata endpoints, localhost services, and RFC 1918 addresses to extract IAM credentials and internal service data.

Affected products (as reported)

Vendor	Product	Versions
HKUDS	nanobot	0 – before 0.3.0

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

References

GitHub Security Advisory (GHSA-vc5v-6vwm-wf9m) vendor-advisory
VulnCheck Advisory: HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool third-party-advisory