Advisories · Technology
OpenBMB XAgent.
Every CVE that names OpenBMB XAgent among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
XAgent Path Traversal Arbitrary File Read via /workspace/file
- OpenBMB XAgent
- Path traversal
- CVSS 6.9 Medium
OpenBMB XAgent ShareServer WebSocket Endpoint share.py check_user missing authentication
- OpenBMB XAgent
- Authentication bypass
- CVSS 2.3 Low
OpenBMB XAgent WebSocket Endpoint replayer.py ReplayServer.send_data authorization
- OpenBMB XAgent
- Broken access control
- CVSS 5.1 Medium
OpenBMB XAgent API Key function_handler.py FunctionHandler.handle_tool_call log file
- OpenBMB XAgent
- Information disclosure
- CVSS 6.9 Medium
OpenBMB XAgent workspace.py workspace path traversal
- OpenBMB XAgent
- Path traversal
- CVSS 5.1 Medium
OpenBMB XAgent community path traversal
- OpenBMB XAgent
- Path traversal
- CVSS 5.3 Medium
OpenBMB XAgent Privileged Mode sandbox
- OpenBMB XAgent
- CWE-265