Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
nanobot is a personal AI assistant. Versions prior to 0.1.5 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability exists in the bridge's WebSocket server in bridge/src/server.ts, resulting from an incomplete remediation of CVE-2026-2577. The original fix changed the binding from 0.0.0.0 to 127.0.0.1 and added an optional BRIDGE_TOKEN parameter, but token authentication is disabled by default and the server does not validate the Origin header during the WebSocket handshake. Because browsers do not enforce the Same-Origin Policy on WebSockets unless the server explicitly denies cross-origin connections, any website visited by a user running the bridge can establish a WebSocket connection to ws://127.0.0.1:3001/ and gain full access to the bridge API. This allows an attacker to hijack the WhatsApp session, read incoming messages, steal authentication QR codes, and send messages on behalf of the user. This issue has bee fixed in version 0.1.5.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-15 | 2 | Disclosure2 |
| 2026-04-16 | 1 | General1 |
CVE-2026-35589: Nanobot AI Assistant WebSocket Hijacking Vulnerability - What It Means for Your Business and How to Respond https://hubs.li/Q04ckmFS0
Post summary
The article introduces CVE‑2026‑35589, a WebSocket hijacking flaw in Nanobot AI Assistant, but does not present exploit code, patch details, or evidence of active exploitation. It focuses on the business impact and suggests general response considerations.
CVE-2026-35589 nanobot is a personal AI assistant. Versions prior to 0.1.5 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability exists in the bridge's WebSocket server in … https://www.cve.org/CVERecord?id=CVE-2026-35589
Post summary
The passage announces that versions of nanobot before 0.1.5 are vulnerable to a Cross‑Site WebSocket Hijacking flaw (CVE‑2026‑35589) and directs readers to the official CVE record.
CVE-2026-35589 Cross-Site WebSocket Hijacking in Nanobot Versions Prior to 0.1.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35589
Post summary
The post alerts on CVE‑2026‑35589, describing a Cross‑Site WebSocket Hijacking flaw in Nanobot prior to version 0.1.5, with no PoC, exploit, patch, or active‑exploitation details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nanobot | nanobot | - | python | - |