CVE-2026-51912

OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-uploadfile-the-preserved-live-upload-file-witness-directly-reaches ToolServer/ToolServerNode/main.py:46...

CVE-2026-51912: n/a: OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in…

OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-uploadfile-the-preserved-live-upload-file-witness-directly-reaches ToolServer/ToolServerNode/main.py:46...

PT-2026-132779

Name of the Vulnerable Software and Affected Versions OpenBMB XAgent version 1.0.0 Description A directory traversal issue exists in the tool server upload handler. This allows an attacker to read or write files outside the intended upload directory on the affected system. The issue is located in...

CVE-2026-51912

OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-uploadfile-the-preserved-live-upload-file-witness-directly-reaches ToolServer/ToolServerNode/main.py:46...

EUVD-2026-113342

OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-uploadfile-the-preserved-live-upload-file-witness-directly-reaches ToolServer/ToolServerNode/main.py:46...

CVE-2026-51912

OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-uploadfile-the-preserved-live-upload-file-witness-directly-reaches ToolServer/ToolServerNode/main.py:46...

CVE-2026-51912

OpenBMB XAgent v1.0.0 is vulnerable to a directory traversal vulnerability located in the ToolServer/ToolServerNode/main.py file at line 46. The flaw exists within the file upload handling logic, which could allow an attacker to access arbitrary files by navigating the directory structure. This v...

OpenBMB XAgent security vulnerability

The OpenBMB XAgent v1.0.0 version contains a security vulnerability. This vulnerability stems from a directory traversal issue in the file upload handling within line 46 of ToolServer/ToolServerNode/main.py, potentially allowing attackers to access arbitrary files via path traversal...

CVE-2026-26396

OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” is user-controllable and is concatenated into the file path to be read without proper validation, leading to a directory...

CVE-2026-26396

OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” is user-controllable and is concatenated into the file path to be read without proper validation, leading to a directory...

CVE-2026-26396

OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” is user-controllable and is concatenated into the file path to be read without proper validation, leading to a directory...

CVE-2026-26396

OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” is user-controllable and is concatenated into the file path to be read without proper validation, leading to a directory...

CVE-2026-26396

OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” is user-controllable and is concatenated into the file path to be read without proper validation, leading to a directory...

CVE-2026-26396: Improper Limitation of a Pathname to a Restricted Directory

OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” is user-controllable and is concatenated into the file path to be read without proper validation, leading to a directory...

PT-2026-57855

OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” is user-controllable and is concatenated into the file path to be read without proper validation, leading to a directory...

CVE-2026-26396

OpenBMB XAgent versions v1.0.0 and before are vulnerable to a path traversal vulnerability. The issue exists in the file() function within XAgent/XAgentServer/application/routers/workspace.py because the user-controllable filename parameter is concatenated into a file path without proper validati...

CVE-2026-4957

A flaw has been found in OpenBMB XAgent 1.0.0. The impacted element is the function FunctionHandler.handletoolcall of the file XAgent/functionhandler.py of the component API Key Handler. This manipulation of the argument apikey causes sensitive information in log files. The attack may be initiate...

EUVD-2026-16690

A vulnerability has been found in OpenBMB XAgent 1.0.0. This affects the function ReplayServer.onconnect/ReplayServer.senddata of the file XAgentServer/application/websockets/replayer.py of the component WebSocket Endpoint. Such manipulation of the argument interactionid leads to authorization...

CVE-2026-4959

A vulnerability was found in OpenBMB XAgent 1.0.0. This impacts the function checkuser of the file XAgentServer/application/websockets/share.py of the component ShareServer WebSocket Endpoint. Performing a manipulation of the argument interactionid results in missing authentication. Remote...

CVE-2026-4958

A vulnerability has been found in OpenBMB XAgent 1.0.0. This affects the function ReplayServer.onconnect/ReplayServer.senddata of the file XAgentServer/application/websockets/replayer.py of the component WebSocket Endpoint. Such manipulation of the argument interactionid leads to authorization...