Secuno
ENNL
Book demo

CVE-2026-35589

Nanobot vulnerability

8.0 HIGHPublic exploitEPSS 0.20%
  1. Published14 Apr 2026

Description

nanobot is a personal AI assistant. Versions prior to 0.1.5 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability exists in the bridge's WebSocket server in bridge/src/server.ts, resulting from an incomplete remediation of CVE-2026-2577. The original fix changed the binding from 0.0.0.0 to 127.0.0.1 and added an optional BRIDGE_TOKEN parameter, but token authentication is disabled by default and the server does not validate the Origin header during the WebSocket handshake. Because browsers do not enforce the Same-Origin Policy on WebSockets unless the server explicitly denies cross-origin connections, any website visited by a user running the bridge can establish a WebSocket connection to ws://127.0.0.1:3001/ and gain full access to the bridge API. This allows an attacker to hijack the WhatsApp session, read incoming messages, steal authentication QR codes, and send messages on behalf of the user. This issue has bee fixed in version 0.1.5.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityHigh
Privileges requiredNone
User interactionRequired
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityNone
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

Affected products

Nanobot< 0.1.5

Remediation

Fixed in
Nanobot≥ 0.1.5

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-773638.8
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian…
CVE-2026-714168.8
Headroom compresses data before the data reaches a large language model. Prior to…
CVE-2026-851839.3
Taipy configures its socket.io server with wildcard CORS origin and credential flag…
CVE-2026-599508.1
The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context…
CVE-2026-100548.8
In affected versions of Eclipse Theia (1.8.1 and later), the browser backend exposes…
CVE-2026-442119.6
Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. In…

Frequently asked

Is CVE-2026-35589 being actively exploited?

CVE-2026-35589 is not in the CISA KEV catalog. A public exploit reference exists, so treat it as exploitable. Its EPSS exploit probability is 0.20%.

How severe is CVE-2026-35589?

CVE-2026-35589 has a CVSS 3.1 base score of 8.0, rated high. EPSS estimates a 0.20% probability of exploitation.

Which products are affected by CVE-2026-35589?

Affected products include Nanobot.

How do I fix CVE-2026-35589?

Upgrade affected software to a fixed version, for example Nanobot 0.1.5 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2026-35589 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.