A vulnerability identified as critical has been detected in HKUDS nanobot up to 0.2.1. The affected element is the function
connect_mcp_servers of the file nanobot/agent/tools/mcp.py of the component MCP enabledTools Scope Handler. Performing a manipulation results in improper access controls.
This vulnerability is reported as CVE-2026-19244. The attack is possible to be carried out remotely. Moreover, an exploit is present.
You should upgrade the affected component.
Multiple issues were reported to the project. They reacted with a high level of professionalism and kindness: “Both reports describe the same root cause: MCP resource and prompt wrappers could be registered outside the intended enabledTools scope. The registration boundary was corrected”.
