CVE-2026-48716 Details
Description
nanobot is a personal AI assistant. In versions 0.1.5.post3 and prior, the WhatsApp bridge in bridge/src/whatsapp.ts constructs a filesystem path using the fileName field from an incoming WhatsApp document message without sanitization. The WhatsApp bridge downloads media attachments and writes them to disk using a filename derived from the sender's message via documentMessage.fileName, which is concatenated with a prefix and its raw value is passed directly to path.join(mediaDir, outFilename). Node.js path.join resolves .. components, allowing an attacker to escape the intended media/ directory by sending a document with a crafted fileName such as ../../../.ssh/authorized_keys. Because the attacker also controls the file content (the downloaded buffer), this is a write-anywhere primitive — both path and content are attacker-controlled. A fix for this issue is planned for version 0.1.5.post4.
A path traversal vulnerability has been identified in the WhatsApp bridge of the Nanobot personal AI assistant, affecting versions through 0.1.5.post3. The issue arises because the bridge constructs a filesystem path using the fileName field from incoming WhatsApp document messages without proper sanitization. This unsanitized filename is concatenated with a prefix and passed directly to path.join, which resolves .. components. As a result, an attacker can escape the intended media directory by sending a document with a crafted filename, such as ../../../.ssh/authorized_keys. Exploitation of this vulnerability allows for arbitrary file writing, as both the path and the file content are under the attacker's control.
Users can update to Nanobot version 0.1.5.post4 or later, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jun 18, 2026CISA-ADP
Assessed Jun 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/HKUDS/nanobot/security/advisories/GHSA-3f63-vcp3-hvqr | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/HKUDS/nanobot/security/advisories/GHSA-3f63-vcp3-hvqr | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| HKUDS nanobot | <= 0.1.5.post3 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 22, 2026 | CVE Modified | CISA-ADP |
| Jun 18, 2026 | New CVE Received | [email protected] |