PT-2026-69148

CVE-2026-19245

Published

2026-08-07

Updated

2026-10-23

Description by

CVSS 3.1

3.3

Low

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions HKUDS nanobot versions prior to 0.3.0

Description A flaw in the Login-shell Environment Handler allows local attackers to cause information disclosure. The issue exists in the ExecTool. prepare command() function within the nanobot/agent/tools/shell.py file. This occurs because shell startup files reintroduce environment variables when command execution defaults to a login shell.

Recommendations Update to version 0.3.0.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CWE-284: Improper Access Control

Related identifiers