CVE-2026-92576 | HKUDS nanobot up to 0.2.x WebFetchTool _validate_url server-side request forgery

September 16, 2026 Yanac

A vulnerability marked as problematic has been reported in HKUDS nanobot up to 0.2.x. Affected by this vulnerability is the function _validate_url of the component WebFetchTool. Performing a manipulation results in server-side request forgery.

This vulnerability was named CVE-2026-92576. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More