CVE-2026-49140
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
Nanobot prior to version 0.2.1 has a denial of service vulnerability in the Matrix channel media download handler. Authenticated room members can exhaust process memory and bandwidth by sending media events with missing or invalid size metadata.
Risk Assessment
An attacker can overload the server, causing service degradation or complete unavailability for other users.
Recommendation
Update Nanobot to version 0.2.1 or later, which includes a fix to limit concurrent large media downloads.
Other vulnerabilities in Nanobot
See all- CVE-2026-49139High
SSRF vulnerability in Nanobot prior to version 0.2.1 in the Microsoft Teams channel handler. A remote attacker can forge an activity with a controlled serviceUrl value, leading to exfiltration of Bot Framework bearer tokens.
- CVE-2026-49138Medium
Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the web_fetch tool, allowing attackers to reach internal hosts via URL redirection to loopback or private addresses, exploiting automatic HTTP redirect following.
- CVE-2026-35589High
nanobot, a personal AI assistant, prior to version 0.1.5 contains a Cross-Site WebSocket Hijacking (CSWSH) vulnerability in the bridge's WebSocket server. The server does not validate the Origin header during the WebSocket handshake, and token authentication is disabled by default. Any website visited by a user running the bridge can establish a WebSocket connection and gain full access to the bridge API, allowing hijacking of the WhatsApp session, reading messages, stealing authentication QR codes, and sending messages on behalf of the user.
Original NVD description (English source)
Nanobot prior to version 0.2.1 contains a denial of service vulnerability in the Matrix channel media download handler that allows authenticated room members to exhaust process memory and bandwidth by sending media events with missing or invalid size metadata. Attackers can send multiple concurrent Matrix media events with omitted or invalid declared sizes to trigger simultaneous large media downloads that fully materialize response bodies before post-download rejection, consuming process resources until service degradation occurs.