ZeroDay Findings
Sign inSign up

Findings

CVE-2026-33654

nanobot is a personal AI assistant.

Published Mar 27, 2026 · updated Jun 17, 2026 · nanobot nanobot

nanobot is a personal AI assistant. Prior to version 0.1.6, an indirect prompt injection vulnerability exists in the email channel processing module ( ), allowing a remote, unauthenticated attacker to execute arbitrary LLM instructions (and subsequently, system tools) without any interaction from the bot owner. By sending an email containing malicious prompts to the bot's monitored email address, the bot automatically polls, ingests, and processes the email content as highly trusted input, fully bypassing channel isolation and resulting in a stealthy, zero-click attack. Version 0.1.6 patches the issue.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 27, 2026 · NIST NVD

    Detected

    nanobot is a personal AI assistant. Prior to version 0.1.6, an indirect prompt injection vulnerability exists in the email channel processing module ( ), allowing a remote, unauthenticated attacker to execute arbitrary LLM instructions (and subsequently, system tools) without any interaction from the bot owner. By sending an email containing malicious prompts to the bot's monitored email address,

  2. Jun 17, 2026 · NIST NVD

    Updated

    nanobot is a personal AI assistant. Prior to version 0.1.6, an indirect prompt injection vulnerability exists in the email channel processing module ( ), allowing a remote, unauthenticated attacker to execute arbitrary LLM instructions (and subsequently, system tools) without any interaction from the bot owner. By sending an email containing malicious prompts to the bot's monitored email address,

Affected

  • cpe nanobot/nanobotversion unspecified
  • cpe nanobot/nanobot0.1.4

Sources

  • CVE.orgVulnerability recordCVE-2026-33654

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-33654

    nanobot is a personal AI assistant. Prior to version 0.1.6, an indirect prompt injection vulnerability exists in the email channel processing module ( ), allowing a remote, unauthenticated attacker to execute arbitrary LLM instructions (and subsequently,

    nvd.nist.gov

References