What happened
NVD published CVE-2026-19244 (CVSS 4.7, Medium) on August 7, 2026, describing an MCP tool-scope access-control failure in nanobot.
Why it matters
An MCP tool-scoping bypass means an agent could invoke tools outside its intended enabled set, undermining a core least-privilege control for MCP-based agent deployments, though blast radius is limited by the package's narrow adoption.
Attack vector
The connect_mcp_servers function in nanobot/agent/tools/mcp.py fails to properly enforce the enabledTools scope, resulting in improper access control that can be remotely triggered.
Affected systems
HKUDS nanobot up to version 0.2.1
Mitigation
Await vendor patch per referenced advisory; restrict MCP server connections to trusted tool sets in the interim.