Hkuds

19 CVEs across 7 Hkuds products. Browse Hkuds vulnerabilities, severities, and proof-of-concept exploits.

Hkuds products with known CVEs

ProductCVEs
Nanobot11
Openharness11
Lightrag5
Vibe-Trading4
Ai-Trader1
Deepcode1
Deeptutor1
Hkuds CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-19246Medium6.32026-08-07A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affects the function _download_image_data_url of the file nanobot/providers/image_generation…
CVE-2026-19245Low3.32026-08-07A flaw has been found in HKUDS nanobot up to 0.2.1. The impacted element is the function ExecTool._prepare_command of the file nanobot/agent/tools/shell.py of…
CVE-2026-19244Medium4.72026-08-07A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected element is the function connect_mcp_servers of the file nanobot/agent/tools/mcp.py of t…
CVE-2026-61808Critical9.82026-08-07LightRAG provides simple and fast retrieval-augmented generation. Through version 1.5.4, the LightRAG API server binds to all network interfaces with authentic…
CVE-2026-19243Medium6.32026-08-07A security vulnerability has been detected in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool._guard_command/ExecTool._spawn of the file nanobot/a…
CVE-2026-617402026-07-15LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, when LightRAG is deployed with LIGHTRAG_API_KEY set but AUTH_ACCOUNTS unset…
CVE-2026-61736Critical9.32026-07-15LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, the server defaults to CORS_ORIGINS=* combined with allow_credentials=True in…
CVE-2026-58173Medium6.52026-06-30Vibe-Trading before 0.1.10 contains a path traversal vulnerability that allows attackers to write files outside the intended memory root directory by supplying…
CVE-2026-58171Medium4.22026-06-30Vibe-Trading before 0.1.10 constructs the swarm run directory by joining a caller-supplied run identifier onto the runs base directory without validation in ru…
CVE-2026-58170High8.32026-06-30Vibe-Trading before 0.1.10 builds the proposal file path by joining a caller-supplied proposal identifier onto the broker proposals directory without sanitizat…
CVE-2026-58169High7.52026-06-30Vibe-Trading before 0.1.10 contains a DNS rebinding authentication bypass vulnerability that allows remote attackers to bypass bearer-token authentication by e…
CVE-2026-58168High8.82026-06-30DeepTutor before version 1.4.10 contains an authorization bypass vulnerability that allows low-privilege users to invoke unrestricted MCP tools due to the allo…
CVE-2026-56696Medium5.42026-06-23OpenHarness /issue and /pr_comments slash commands lack remote_invocable=False protection, allowing remote channel senders to write attacker-controlled Markdow…
CVE-2026-56695Medium6.52026-06-23OpenHarness ohmo gateway /resume and /summary slash commands default remote_invocable to True, allowing admitted remote senders to enumerate and load arbitrary…
CVE-2026-48716High8.72026-06-18nanobot is a personal AI assistant. In versions 0.1.5.post3 and prior, the WhatsApp bridge in bridge/src/whatsapp.ts constructs a filesystem path using the fil…
CVE-2026-12203Medium5.32026-06-15A vulnerability was found in HKUDS AI-Trader up to 74caf996f78dcc0c657df8365c8544678a16e215. This affects an unknown part of the file /api/research/agents.csv…
CVE-2026-49140Medium4.32026-06-01Nanobot prior to version 0.2.1 contains a denial of service vulnerability in the Matrix channel media download handler that allows authenticated room members t…
CVE-2026-491392026-06-01Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the Microsoft Teams channel handler that allows remote attackers to exfi…
CVE-2026-49138Medium5.02026-06-01Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the web_fetch tool that allows remote attackers to reach internal or pri…
CVE-2026-32847High7.52026-05-28DeepCode through commit c991dc2 contains a path traversal vulnerability in the SPA catch-all route in new_ui/backend/main.py that allows unauthenticated attack…
CVE-2026-7551High8.82026-04-30HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute a…
CVE-2026-6823High8.22026-04-21HKUDS OpenHarness prior to PR #147 remediation contains an insecure default configuration vulnerability where remote channels inherit allow_from = ["*"] permit…
CVE-2026-6819High8.82026-04-21HKUDS OpenHarness prior to PR #156 remediation exposes plugin lifecycle commands including /plugin install, /plugin enable, /plugin disable, and /reload-plugin…
CVE-2026-6729Medium6.32026-04-20HKUDS OpenHarness prior to PR #159 remediation contains a session key derivation vulnerability that allows authenticated participants in shared chats or thread…
CVE-2026-40516High8.32026-04-17OpenHarness before commit bd4df81 contains a server-side request forgery vulnerability in the web_fetch and web_search tools that allows attackers to access pr…
CVE-2026-40515High7.52026-04-17OpenHarness before commit bd4df81 contains a permission bypass vulnerability that allows attackers to read sensitive files by exploiting incomplete path normal…
CVE-2026-40503Medium6.52026-04-16OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows remote gateway users with chat access to read arbitrary files by supply…
CVE-2026-40502High8.82026-04-16OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote gateway users with chat access to invoke sensitive administra…
CVE-2026-35589High8.02026-04-14nanobot is a personal AI assistant. Versions prior to 0.1.5 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability exists in the bridge's WebSocket ser…
CVE-2026-39413Medium4.22026-04-08LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.4.14, the LightRAG API is vulnerable to a JWT algorithm confusion attack where an…
CVE-2026-22682High7.12026-04-07OpenHarness prior to commit 166fcfe contains an improper access control vulnerability in built-in file tools due to inconsistent parameter handling in permissi…
CVE-2026-33654Critical9.82026-03-27nanobot is a personal AI assistant. Prior to version 0.1.6, an indirect prompt injection vulnerability exists in the email channel processing module (`nanobot/…
CVE-2026-2577Critical10.02026-02-16The WhatsApp bridge component in Nanobot binds the WebSocket server to all network interfaces (0.0.0.0) on port 3001 by default and does not require authentica…
CVE-2025-6773Medium5.32025-06-27A vulnerability was found in HKUDS LightRAG up to 1.3.8. It has been declared as critical. Affected by this vulnerability is the function upload_to_input_dir o…