Nanobot, before version 0.2.1, contains a server‑side request forgery flaw in the web_fetch tool that allows attackers to reach internal or private network hosts by supplying a URL that redirects to a loopback or private address via a 3xx Location header. The attacker takes advantage of the httpx library’s automatic HTTP redirect following, which bypasses initial URL validation and causes the runtime to send outbound requests to internal hosts before final resolved‑URL validation is applied. Based on the description, it is inferred that this flaw could be used to exfiltrate data or communicate with services that are otherwise inaccessible from the Internet, resulting in potential compromise of internal resources.

Impact applies to the HKUDS Nanobot tool, specifically any release earlier than 0.2.1. No other vendor or product versions are listed.

The CVSS score of 5.3 indicates a moderate severity, and the EPSS score is not available. Because the vulnerability is remotely exploitable over HTTP and requires only a crafted request, it can be inferred that the likelihood of exploitation is significant for attackers who target exposed instances of Nanobot. The flaw is not listed in the CISA KEV catalog, but it can still be leveraged to gain internal network access.