What is CVE-2026-19244?
CVE-2026-19244 is an improper access controls vulnerability in the `connect_mcp_servers` function within the MCP EnabledTools Scope Handler component of HKUDS nanobot versions up to 0.2.1. This flaw can be exploited remotely. Users are advised to update the nanobot package to the latest version immediately.
Azərbaycanca: CVE-2026-19244, HKUDS nanobot-un 0.2.1-ə qədər versiyalarında MCP EnabledTools Scope Handler komponentində yerləşən `connect_mcp_servers` funksiyasında düzgün olmayan giriş nəzarəti zəifliyidir. Bu, uzaqdan istismar edilə bilən təhlükəsizlik boşluğudur. İstifadəçilərə dərhal nanobot paketini ən son versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-284
FAQ2
What software is affected by CVE-2026-19244?
CVE-2026-19244 is an improper access controls vulnerability affecting HKUDS nanobot package versions up to 0.2.1.
What should users do to mitigate CVE-2026-19244?
Users are advised to update the nanobot package to the latest version immediately.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.