# CVE-2026-49138: HKUDS Nanobot SSRF in web_fetch tool via redirect following

Source: https://junglewise.ai/threats/cve-2026-49138-hkuds-nanobot-ssrf-in-web-fetch-tool-via-redirect-following  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-01. Updated: 2026-07-27  
License: CC BY 4.0 with a link back

CVE-2026-49138 · Severity: medium · CVSS 5 · Published 2026-06-01

Nanobot is an AI-powered tool used for fetching web content. A security flaw in its web-fetching component allows attackers to trick the system into making unauthorized requests to internal or private network services. This could lead to the exposure of internal data or unauthorized access to private infrastructure that is not normally accessible from the internet.

Technologies: [HKUDS Nanobot](https://junglewise.ai/threats/technologies/nanobot). Vendors: [HKUDS](https://junglewise.ai/threats/vendors/hkuds), [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-49138 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-49138 being exploited in the wild.

**How severe is CVE-2026-49138?** Medium severity, with a CVSS score of 5, published 1 June 2026.

**Which products and versions are affected?** HKUDS Nanobot < 0.2.1; nanobot-ai (PyPI) < 0.2.1, ECOSYSTEM:introduced=0,fixed=0.2.1.

**Is there a fix for CVE-2026-49138?** Yes. nanobot-ai (PyPI): upgrade to 0.2.1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-49138 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-49138?** Check whether you run HKUDS Nanobot or nanobot-ai (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- nanobot-ai (PyPI): upgrade to 0.2.1 or later

  ```sh
  pip install "nanobot-ai>=0.2.1"
  ```


## Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in Nanobot's web_fetch tool due to improper handling of HTTP redirects. The application uses the httpx library, which automatically follows 3xx Location headers. An attacker can provide a URL that passes initial validation but subsequently redirects to a loopback (127.0.0.1) or private IP address. Because the final resolved URL is not re-validated before the request is completed, the attacker can probe or interact with internal network services. This issue is fixed in version 0.2.1.

## Affected products

- HKUDS nanobot-ai < 0.2.1

## Identifiers

- CVE-2026-49138
- GHSA-434r-7c99-hwf3
- PYSEC-2026-3580

## Timeline

- 2026-06-01: disclosed
- 2026-06-01: advisory
- 2026-07-27: patched: Advisory updated with patch details

## References

- [https://api.github.com/users/faketut](https://api.github.com/users/faketut)
- [https://github.com/faketut](https://github.com/faketut)
- [https://api.github.com/users/faketut/gists%7B/gist_id%7D](https://api.github.com/users/faketut/gists%7B/gist_id%7D)
- [https://api.github.com/users/faketut/repos](https://api.github.com/users/faketut/repos)
- [https://avatars.githubusercontent.com/u/104810086?v=4](https://avatars.githubusercontent.com/u/104810086?v=4)
- [https://api.github.com/users/faketut/events%7B/privacy%7D](https://api.github.com/users/faketut/events%7B/privacy%7D)

## Related threats

- [HKUDS nanobot server-side request forgery in WebFetchTool](https://junglewise.ai/threats/cve-2026-92576-hkuds-nanobot-server-side-request-forgery-in-webfetchtool)
- [HKUDS nanobot argument injection in shell command execution](https://junglewise.ai/threats/cve-2026-90809-hkuds-nanobot-argument-injection-in-shell-command-execution)
- [HKUDS nanobot incomplete blacklist in shell command execution](https://junglewise.ai/threats/cve-2026-90808-hkuds-nanobot-incomplete-blacklist-in-shell-command-execution)
- [HKUDS nanobot path traversal in WhatsApp bridge](https://junglewise.ai/threats/cve-2026-48716-hkuds-nanobot-path-traversal-in-whatsapp-bridge)
- [HKUDS Nanobot denial of service in Matrix media download handler](https://junglewise.ai/threats/cve-2026-49140-hkuds-nanobot-denial-of-service-in-matrix-media-download-handler)