VYPR

WhatsApp bridge

by Hkuds

CVEs (1)

  • CVE-2026-2577CriFeb 16, 2026
    risk 0.65cvss 10.0epss 0.01

    The WhatsApp bridge component in Nanobot binds the WebSocket server to all network interfaces (0.0.0.0) on port 3001 by default and does not require authentication for incoming connections. An unauthenticated remote attacker with network access to the bridge can connect to the…