Nanobot Unauthenticated WhatsApp Session Hijack via WebSocket Bridge
Tenable Research has identified and responsibly disclosed a vulnerability to Nanobot.
The nanobot WhatsApp bridge server (`bridge/src/server.ts`) binds its WebSocket server to all network interfaces (`0.0.0.0`) and accepts connections without any form of authentication. An attacker with network access to the bridge port (default `3001`) can fully hijack the linked WhatsApp session: send messages on behalf of the user, intercept all incoming messages in real time, and capture QR codes during authentication.
