CVE-2026-35589 Details
Description
nanobot is a personal AI assistant. Versions prior to 0.1.5 contain a Cross-Site WebSocket Hijacking (CSWSH) vulnerability exists in the bridge's WebSocket server in bridge/src/server.ts, resulting from an incomplete remediation of CVE-2026-2577. The original fix changed the binding from 0.0.0.0 to 127.0.0.1 and added an optional BRIDGE_TOKEN parameter, but token authentication is disabled by default and the server does not validate the Origin header during the WebSocket handshake. Because browsers do not enforce the Same-Origin Policy on WebSockets unless the server explicitly denies cross-origin connections, any website visited by a user running the bridge can establish a WebSocket connection to ws://127.0.0.1:3001/ and gain full access to the bridge API. This allows an attacker to hijack the WhatsApp session, read incoming messages, steal authentication QR codes, and send messages on behalf of the user. This issue has bee fixed in version 0.1.5.
A Cross-Site WebSocket Hijacking (CSWSH) vulnerability has been identified in the Nanobot personal AI assistant, specifically in versions prior to 0.1.5. The issue resides in the WebSocket server of the WhatsApp bridge component, located in bridge/src/server.ts. This vulnerability allows an attacker to hijack a user's WhatsApp session by exploiting the WebSocket connection to the local bridge API. The root cause stems from an incomplete fix for a previous vulnerability, CVE-2026-2577, which left the WebSocket server open to cross-origin connections without proper validation. As a result, any website visited by a user can establish a WebSocket connection and gain unauthorized access to the bridge API, including the ability to read messages, steal authentication QR codes, and send messages on behalf of the user.
Users can upgrade to Nanobot version 0.1.5 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/HKUDS/nanobot/security/advisories/GHSA-v5j3-4q66-58cf | CISA-ADP | ExploitVendor Advisory |
| https://github.com/HKUDS/nanobot/releases/tag/v0.1.5 | [email protected] | ProductRelease Notes |
| https://github.com/HKUDS/nanobot/security/advisories/GHSA-v5j3-4q66-58cf | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-1385 | Missing Origin Validation in WebSockets | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| nanobot nanobot | < 0.1.5 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 24, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 23, 2026 | Initial Analysis | [email protected] |
| Apr 15, 2026 | CVE Modified | CISA-ADP |
| Apr 14, 2026 | New CVE Received | [email protected] |