CVE-2026-19245Disclosure

LOWCVSS 1.9 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in HKUDS nanobot up to 0.2.1. The impacted element is the function ExecTool._prepare_command of the file nanobot/agent/tools/shell.py of the component Login-shell Environment Handler. Executing a manipulation can lead to information disclosure. The attack requires local access. The exploit has been published and may be used. Upgrading to version 0.3.0 is sufficient to resolve this issue. This patch is called 4525. The affected component should be upgraded. Multiple issues were reported to the project. They reacted with a high level of professionalism and kindness: "The report concerns shell startup files reintroducing environment variables when command execution defaults to a login shell. The default was changed so exec does not use a login shell unless explicitly requested".

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-200CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud46d
Disclosure
🚨*CVE* CVE-2026-19245 A flaw has been found in HKUDS nanobot up to 0.2.1. The impacted element is the function ExecTool._prepare_command of the file nanobot/agent/tools/shell.py of the com… https://www.cve.org/CVERecord?id=CVE-2026-19245 ----- Traducción: CVE-2026-19245 Se … http://infoflow.cloud`
Post summary
A flaw has been reported in HKUDS nanobot 0.2.1 affecting the ExecTool._prepare_command function, with reference to the CVE record, but no PoC, exploit, patch, or active exploitation details are provided.
0000050
98 followersView on X
CVE@CVEnew46d
Disclosure
CVE-2026-19245 A flaw has been found in HKUDS nanobot up to 0.2.1. The impacted element is the function ExecTool._prepare_command of the file nanobot/agent/tools/shell.py of the com… https://www.cve.org/CVERecord?id=CVE-2026-19245
Post summary
A vulnerability (CVE-2026-19245) affecting HKUDS nanobot up to version 0.2.1 has been identified, impacting the ExecTool._prepare_command function in shell.py. No PoC, exploit, or patch information is provided.
000001.4K
57.9K followersView on X

Explore more

Back to dashboard