Vulnerabilities in HKUDS

34 results
Vexday analysis

A HKUDS apresenta 29 vulnerabilidades catalogadas, com 16 publicadas nos últimos 90 dias, indicando atividade recorrente de descoberta. Embora nenhuma esteja sob ataque ativo documentado (KEV), 3 são classificadas como críticas e a fraqueza dominante é traversal de diretório (CWE-22), fator de risco significativo em produtos de acesso a dados. O ritmo recente de divulgações recomenda acompanhamento contínuo, especialmente se o fornecedor for crítico para a operação.

CVE-2026-19244MEDIUMHKUDS nanobot MCP enabledTools Scope mcp.py connect_mcp_servers access controlEPSS 0.3%CVE-2026-49140MEDIUMNanobot < 0.2.1 Denial of Service via Matrix Media Download HandlerEPSS 0.3%CVE-2026-58171LOWVibe-Trading < 0.1.10 - Path Traversal via Swarm Run IdentifierEPSS 0.3%CVE-2026-56695HIGHOpenHarness - Cross-Session Disclosure via /resume and /summary CommandsEPSS 0.2%CVE-2026-40515HIGHOpenHarness Permission Bypass via grep and glob root argumentEPSS 0.2%CVE-2026-19246MEDIUMHKUDS nanobot Provider-returned Image URL image_generation.py _download_image_data_url server-side request forgeryEPSS 0.2%CVE-2026-56696MEDIUMOpenHarness - Prompt Injection via /issue and /pr_comments Slash CommandsEPSS 0.2%CVE-2026-6729MEDIUMHKUDS OpenHarness Session Key Collision Privilege EscalationEPSS 0.2%CVE-2026-40516HIGHOpenHarness SSRF via web_fetch and web_searchEPSS 0.2%CVE-2026-39413MEDIUMLightRAG has a JWT Algorithm Confusion Vulnerability in LightRAG APIEPSS 0.2%CVE-2025-6773MEDIUMHKUDS LightRAG File Upload document_routes.py upload_to_input_dir path traversalEPSS 0.2%CVE-2026-35589HIGHnanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update)EPSS 0.2%CVE-2026-22682HIGHOpenHarness Improper Access Control via File ToolsEPSS 0.1%CVE-2026-19245MEDIUMHKUDS nanobot Login-shell Environment shell.py ExecTool._prepare_command information disclosureEPSS 0.1%