CVE-2026-35589

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-35589", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-03T20:09:02.828Z", "datePublished": "2026-04-14T22:47:32.837Z", "dateUpdated": "2026-04-15T16:14:06.128Z"}, "containers": {"cna": {"title": "nanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update)", "problemTypes": [{"descriptions": [{"cweId": "CWE-1385", "lang": "en", "description": "CWE-1385: Missing Origin Validation in WebSockets", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/HKUDS/nanobot/security/advisories/GHSA-v5j3-4q66-58cf", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/HKUDS/nanobot/security/advisories/GHSA-v5j3-4q66-58cf"}, {"name": "https://github.com/HKUDS/nanobot/releases/tag/v0.1.5", "tags": ["x_refsource_MISC"], "url": "https://github.com/HKUDS/nanobot/releases/tag/v0.1.5"}], "affected": [{"vendor": "HKUDS", "product": "nanobot", "versions": [{"version": "< 0.1.5", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-04-14T22:47:32.837Z"}, "descriptions": [{"lang": "en", "value": "nanobot is a personal AI assistant. Versions prior to 0.1.5 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability exists in the bridge's WebSocket server in bridge/src/server.ts, resulting from an incomplete remediation of CVE-2026-2577. The original fix changed the binding from 0.0.0.0 to 127.0.0.1 and added an optional BRIDGE_TOKEN parameter, but token authentication is disabled by default and the server does not validate the Origin header during the WebSocket handshake. Because browsers do not enforce the Same-Origin Policy on WebSockets unless the server explicitly denies cross-origin connections, any website visited by a user running the bridge can establish a WebSocket connection to ws://127.0.0.1:3001/ and gain full access to the bridge API. This allows an attacker to hijack the WhatsApp session, read incoming messages, steal authentication QR codes, and send messages on behalf of the user. This issue has bee fixed in version 0.1.5."}], "source": {"advisory": "GHSA-v5j3-4q66-58cf", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/HKUDS/nanobot/security/advisories/GHSA-v5j3-4q66-58cf", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-15T16:06:39.458794Z", "id": "CVE-2026-35589", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-15T16:14:06.128Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-35589", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-15T16:06:39.458794Z"}}}], "references": [{"url": "https://github.com/HKUDS/nanobot/security/advisories/GHSA-v5j3-4q66-58cf", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-15T16:06:52.475Z"}}], "cna": {"title": "nanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update)", "source": {"advisory": "GHSA-v5j3-4q66-58cf", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "HKUDS", "product": "nanobot", "versions": [{"status": "affected", "version": "< 0.1.5"}]}], "references": [{"url": "https://github.com/HKUDS/nanobot/security/advisories/GHSA-v5j3-4q66-58cf", "name": "https://github.com/HKUDS/nanobot/security/advisories/GHSA-v5j3-4q66-58cf", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/HKUDS/nanobot/releases/tag/v0.1.5", "name": "https://github.com/HKUDS/nanobot/releases/tag/v0.1.5", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "nanobot is a personal AI assistant. Versions prior to 0.1.5 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability exists in the bridge's WebSocket server in bridge/src/server.ts, resulting from an incomplete remediation of CVE-2026-2577. The original fix changed the binding from 0.0.0.0 to 127.0.0.1 and added an optional BRIDGE_TOKEN parameter, but token authentication is disabled by default and the server does not validate the Origin header during the WebSocket handshake. Because browsers do not enforce the Same-Origin Policy on WebSockets unless the server explicitly denies cross-origin connections, any website visited by a user running the bridge can establish a WebSocket connection to ws://127.0.0.1:3001/ and gain full access to the bridge API. This allows an attacker to hijack the WhatsApp session, read incoming messages, steal authentication QR codes, and send messages on behalf of the user. This issue has bee fixed in version 0.1.5."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1385", "description": "CWE-1385: Missing Origin Validation in WebSockets"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-04-14T22:47:32.837Z"}}}, "cveMetadata": {"cveId": "CVE-2026-35589", "state": "PUBLISHED", "dateUpdated": "2026-04-15T16:14:06.128Z", "dateReserved": "2026-04-03T20:09:02.828Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-04-14T22:47:32.837Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "nanobot", "vendor": "HKUDS", "versions": [{"status": "affected", "version": "< 0.1.5"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:nanobot:nanobot:*:*:*:*:*:python:*:*", "matchCriteriaId": "A49E607E-4AFA-4174-ABF0-23048004C83C", "versionEndExcluding": "0.1.5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "nanobot is a personal AI assistant. Versions prior to 0.1.5 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability exists in the bridge's WebSocket server in bridge/src/server.ts, resulting from an incomplete remediation of CVE-2026-2577. The original fix changed the binding from 0.0.0.0 to 127.0.0.1 and added an optional BRIDGE_TOKEN parameter, but token authentication is disabled by default and the server does not validate the Origin header during the WebSocket handshake. Because browsers do not enforce the Same-Origin Policy on WebSockets unless the server explicitly denies cross-origin connections, any website visited by a user running the bridge can establish a WebSocket connection to ws://127.0.0.1:3001/ and gain full access to the bridge API. This allows an attacker to hijack the WhatsApp session, read incoming messages, steal authentication QR codes, and send messages on behalf of the user. This issue has bee fixed in version 0.1.5."}, {"lang": "es", "value": "nanobot es un asistente personal de IA. Existe una vulnerabilidad de Cross-Site WebSocket Hijacking (CSWSH) en las versiones anteriores a la 0.1.5 en el servidor WebSocket del puente en bridge/src/server.ts, resultante de una remediaci\u00f3n incompleta de CVE-2026-2577. La soluci\u00f3n original cambi\u00f3 el enlace de 0.0.0.0 a 127.0.0.1 y a\u00f1adi\u00f3 un par\u00e1metro opcional BRIDGE_TOKEN, pero la autenticaci\u00f3n por token est\u00e1 deshabilitada por defecto y el servidor no valida la cabecera Origin durante el handshake de WebSocket. Dado que los navegadores no aplican la Pol\u00edtica del Mismo Origen (Same-Origin Policy) en WebSockets a menos que el servidor deniegue expl\u00edcitamente las conexiones de origen cruzado, cualquier sitio web visitado por un usuario que ejecute el puente puede establecer una conexi\u00f3n WebSocket a ws://127.0.0.1:3001/ y obtener acceso completo a la API del puente. Esto permite a un atacante secuestrar la sesi\u00f3n de WhatsApp, leer mensajes entrantes, robar c\u00f3digos QR de autenticaci\u00f3n y enviar mensajes en nombre del usuario. Este problema ha sido solucionado en la versi\u00f3n 0.1.5."}], "id": "CVE-2026-35589", "lastModified": "2026-07-24T21:10:00.143", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 5.8, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.8, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-35589", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-15T16:06:39.458794Z", "version": "2.0.3"}}]}, "published": "2026-04-14T23:16:29.130", "references": [{"source": "security-advisories@github.com", "tags": ["Product", "Release Notes"], "url": "https://github.com/HKUDS/nanobot/releases/tag/v0.1.5"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/HKUDS/nanobot/security/advisories/GHSA-v5j3-4q66-58cf"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/HKUDS/nanobot/security/advisories/GHSA-v5j3-4q66-58cf"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1385"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.1.5)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "nanobot", "source": "cna", "vendor": "HKUDS"}, "product": "nanobot", "vendor": "hkuds"}], "analysis": {"en": {"generated_at": "2026-04-15T00:25:14.401437+00:00", "value": {"mitigation_remediation": ["Update the nanobot Bridge to version 0.1.5 or later to apply the official fix that enables BRIDGE_TOKEN authentication by default and introduces Origin header validation.", "If upgrading immediately is not possible, manually enable the required BRIDGE_TOKEN parameter and restrict client access to the WebSocket server by firewall rules so that only trusted internal processes or localhost can connect.", "Modify the server configuration to reject connections whose Origin header does not match the bridge\u2019s own origin, thereby enforcing cross\u2011origin restrictions even if the token remains disabled."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "The vulnerability affects the HKUDS nanobot application, specifically any installation running a Bridge backend version older than 0.1.5. The affected component is the WebSocket server defined in bridge/src/server.ts. Users who have not applied the v0.1.5 release are at risk.", "description_and_impact": "nanobot, a personal AI assistant, contains a Cross\u2011Site WebSocket Hijacking flaw that was partially remedied in a prior CVE. The server runs at 127.0.0.1 on port 3001 and accepts WebSocket connections without validating the Origin header or enforcing token authentication, which remains disabled by default. An attacker can craft a webpage that a user visited while running nanobot; the webpage can open a WebSocket to the local server and gain unrestricted access to the WhatsApp Bridge API. The resulting compromise lets the attacker read messages, capture authentication QR codes, and send messages on the victim\u2019s behalf, effectively providing remote command execution over the bridge. This weakness is listed under CWE\u20111385.", "risk_and_exploitability": "The CVSS score of 8.0 classifies the flaw as high severity. EPSS data is not available, so the exploit probability is unknown, and the issue is not currently catalogued in the CISA KEV list. Attacks require a user to be running the bridge and to visit a malicious site that initiates the WebSocket handshake; the browser does not enforce Same\u2011Origin Policy on WebSockets unless the server explicitly rejects cross\u2011origin traffic. If an attacker can trick a user into meeting these conditions, the bridge can be hijacked to perform arbitrary actions on the victim\u2019s WhatsApp account."}}}}, "created": "2026-04-15T13:48:23.614139+00:00", "updated": "2026-04-15T14:31:57.021740+00:00", "vendors": ["hkuds", "hkuds$PRODUCT$nanobot"]}