CVE-2026-49139
HIGHCVSS v4.0: 7.0 · EPSS: 0.0013 (32.4 percentile)
Source data as of:
At a glance
- Severity
- HIGH
- CVSS
- 7.0 v4.0 · NVD
- EPSS
- 0.0013 (32.4 percentile) · FIRST.org
- CISA KEV
- No
- Type
- SSRF · NVD CWE
- Attack conditions (CVSS vector)
- NetworkNo privilegesNo user interaction · Source: NVD Vector
- Published
- 2026-06-01 · Modified: 2026-06-02
- References
- Jump to references (4)
CVSS / EPSS / KEV
Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources
Description
Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the Microsoft Teams channel handler that allows remote attackers to exfiltrate Bot Framework bearer tokens by supplying a forged activity with an attacker-controlled serviceUrl value. Attackers can poison the stored conversation reference by sending a crafted inbound activity to the Teams webhook, causing subsequent bot replies to transmit token-bearing Authorization header requests to an attacker-controlled host.
References
Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.
- Patch https://github.com/HKUDS/nanobot/commit/232df45126bcf0f8fccd123d73714f202c8e8612
- Reference https://github.com/HKUDS/nanobot/pull/4047
- Patch https://github.com/HKUDS/nanobot/releases/tag/v0.2.1
- Vendor advisory https://www.vulncheck.com/advisories/nanobot-ssrf-via-microsoft-teams-channel-serviceurl-p…