https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T05:36:14.739854+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-90808 CVE-2026-90808 — HKUDS nanobot ExecTool shell.py ExecTool._spawn incomplete blacklist 2026-09-29T05:36:14.741080+00:00

Affected: HKUDS nanobot

A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool._guard_command/ExecTool._spawn of the file nanobot/agent/tools/shell.py of the component ExecTool. This manipulation causes incomplete blacklist. It is possible to initiate the attack remotely. Patch name: af582246f141311d574551b7571a517bcc3df750. Applying a patch is the recommended action to fix this issue.