Openbmb

Xagent

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.3

CVE-2026-4959

Exploit
  • EPSS 0.07%
  • Veröffentlicht 27.03.2026 15:31:29
  • Zuletzt bearbeitet 30.03.2026 13:26:29

A vulnerability was found in OpenBMB XAgent 1.0.0. This impacts the function check_user of the file XAgentServer/application/websockets/share.py of the component ShareServer WebSocket Endpoint. Performing a manipulation of the argument interaction_id...

3.1

CVE-2026-4958

Exploit
  • EPSS 0.03%
  • Veröffentlicht 27.03.2026 15:31:27
  • Zuletzt bearbeitet 30.03.2026 13:26:29

A vulnerability has been found in OpenBMB XAgent 1.0.0. This affects the function ReplayServer.on_connect/ReplayServer.send_data of the file XAgentServer/application/websockets/replayer.py of the component WebSocket Endpoint. Such manipulation of the...

2.7

CVE-2026-4957

Exploit
  • EPSS 0.04%
  • Veröffentlicht 27.03.2026 14:52:21
  • Zuletzt bearbeitet 30.03.2026 13:26:29

A flaw has been found in OpenBMB XAgent 1.0.0. The impacted element is the function FunctionHandler.handle_tool_call of the file XAgent/function_handler.py of the component API Key Handler. This manipulation of the argument api_key causes sensitive i...

6.5

CVE-2026-3954

Exploit
  • EPSS 0.07%
  • Veröffentlicht 11.03.2026 20:02:08
  • Zuletzt bearbeitet 12.03.2026 21:08:22

A weakness has been identified in OpenBMB XAgent 1.0.0. Affected by this vulnerability is the function workspace of the file XAgentServer/application/routers/workspace.py. This manipulation of the argument file_name causes path traversal. The attack ...

6.3

CVE-2025-6281

  • EPSS 0.11%
  • Veröffentlicht 19.06.2025 21:31:05
  • Zuletzt bearbeitet 02.07.2025 18:37:11

A vulnerability has been found in OpenBMB XAgent up to 1.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /conv/community. The manipulation leads to path traversal. The exploit has been disclosed ...

8.8

CVE-2024-2007

  • EPSS 0.09%
  • Veröffentlicht 21.03.2024 02:52:25
  • Zuletzt bearbeitet 02.06.2025 15:32:05

A vulnerability was found in OpenBMB XAgent 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Privileged Mode. The manipulation leads to sandbox issue. The attack needs to be approach...