HKUDS nanobot up to 0.2.1 Login-shell Environment shell.py ExecTool._prepare_command information disclosure

Summaryinfo

A vulnerability marked as problematic has been reported in HKUDS nanobot up to 0.2.1. This affects the function ExecTool._prepare_command of the file nanobot/agent/tools/shell.py of the component Login-shell Environment Handler. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2026-19245. An attack has to be approached locally. Furthermore, there is an exploit available. It is suggested to upgrade the affected component. Multiple issues were reported to the project. They reacted with a high level of professionalism and kindness: "The report concerns shell startup files reintroducing environment variables when command execution defaults to a login shell. The default was changed so exec does not use a login shell unless explicitly requested".

Detailsinfo

A vulnerability was found in HKUDS nanobot up to 0.2.1. It has been rated as problematic. This issue affects the function ExecTool._prepare_command of the file nanobot/agent/tools/shell.py of the component Login-shell Environment Handler. The manipulation with an unknown input leads to a information disclosure vulnerability. Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Impacted is confidentiality.

It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2026-19245. The exploitation is known to be easy. Attacking locally is a requirement. Technical details as well as a public exploit are known. The attack technique deployed by this issue is T1592 according to MITRE ATT&CK.

The exploit is available at gist.github.com. It is declared as proof-of-concept. Multiple issues were reported to the project. They reacted with a high level of professionalism and kindness: "The report concerns shell startup files reintroducing environment variables when command execution defaults to a login shell. The default was changed so exec does not use a login shell unless explicitly requested".

Upgrading to version 0.3.0 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying the patch 4525 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• HKUDS

Name

• nanobot

Version

• 0.2.0
• 0.2.1

Website

• Product: https://github.com/HKUDS/nanobot/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #865117: HKUDS nanobot 0.2.1 Sensitive Information Exposure via Login Shell Startup Files (CWE-200) (by Eric-c)

Be aware that VulDB is the high quality source for vulnerability data.

Discussion