agentprime: openbmb-xagent

agentprime: openbmb-xagentEvery new CVE for openbmb-xagent.https://agentprime.io/CVE-2026-72713: XAgent Path Traversal Arbitrary File Read via /workspace/filehttps://agentprime.io/advisories/CVE-2026-72713/https://agentprime.io/advisories/CVE-2026-72713/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 17:53:52 GMTCVECVE-2026-4959: OpenBMB XAgent ShareServer WebSocket Endpoint share.py check_user missing authenticationhttps://agentprime.io/advisories/CVE-2026-4959/https://agentprime.io/advisories/CVE-2026-4959/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 15:31:29 GMTCVECVE-2026-4958: OpenBMB XAgent WebSocket Endpoint replayer.py ReplayServer.send_data authorizationhttps://agentprime.io/advisories/CVE-2026-4958/https://agentprime.io/advisories/CVE-2026-4958/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 15:31:27 GMTCVECVE-2026-4957: OpenBMB XAgent API Key function_handler.py FunctionHandler.handle_tool_call log filehttps://agentprime.io/advisories/CVE-2026-4957/https://agentprime.io/advisories/CVE-2026-4957/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 14:52:21 GMTCVECVE-2026-3954: OpenBMB XAgent workspace.py workspace path traversalhttps://agentprime.io/advisories/CVE-2026-3954/https://agentprime.io/advisories/CVE-2026-3954/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 20:02:08 GMTCVECVE-2025-6281: OpenBMB XAgent community path traversalhttps://agentprime.io/advisories/CVE-2025-6281/https://agentprime.io/advisories/CVE-2025-6281/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Jun 2025 21:31:05 GMTCVECVE-2024-2007: OpenBMB XAgent Privileged Mode sandboxhttps://agentprime.io/advisories/CVE-2024-2007/https://agentprime.io/advisories/CVE-2024-2007/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Feb 2024 18:31:04 GMTCVE