17 matches found
CVE-2024-34524
In XLANG OpenAgents through fe73ac4, the allowedfile protection mechanism can be bypassed by using an incorrect file extension for the nature of the file content...
EUVD-2025-18699
Malicious code in bioql PyPI...
CVE-2025-6282
A vulnerability was found in xlang-ai OpenAgents up to ff2e46440699af1324eb25655b622c4a131265bb and classified as critical. Affected by this issue is the function createuploadfile of the file backend/api/file.py. The manipulation leads to path traversal. The exploit has been disclosed to the publ...
CVE-2025-6282
A vulnerability was found in xlang-ai OpenAgents up to ff2e46440699af1324eb25655b622c4a131265bb and classified as critical. Affected by this issue is the function createuploadfile of the file backend/api/file.py. The manipulation leads to path traversal. The exploit has been disclosed to the publ...
CVE-2025-6282 xlang-ai OpenAgents file.py create_upload_file path traversal
A vulnerability was found in xlang-ai OpenAgents up to ff2e46440699af1324eb25655b622c4a131265bb and classified as critical. Affected by this issue is the function createuploadfile of the file backend/api/file.py. The manipulation leads to path traversal. The exploit has been disclosed to the publ...
CVE-2025-6282 xlang-ai OpenAgents file.py create_upload_file path traversal
A vulnerability was found in xlang-ai OpenAgents up to ff2e46440699af1324eb25655b622c4a131265bb and classified as critical. Affected by this issue is the function createuploadfile of the file backend/api/file.py. The manipulation leads to path traversal. The exploit has been disclosed to the publ...
CVE-2025-6282
The CVE-2025-6282 issue affects xlang-ai OpenAgents, specifically the create_upload_file function in backend/api/file.py, where a path traversal vulnerability is introduced. Multiple connected sources confirm the vulnerability is critical and that the exploit has been disclosed publicly, with Ope...
CVE-2025-6282
A vulnerability was found in xlang-ai OpenAgents up to ff2e46440699af1324eb25655b622c4a131265bb and classified as critical. Affected by this issue is the function createuploadfile of the file backend/api/file.py. The manipulation leads to path traversal. The exploit has been disclosed to the publ...
PT-2025-26246
Name of the Vulnerable Software and Affected Versions xlang-ai OpenAgents versions up to ff2e46440699af1324eb25655b622c4a131265bb Description A critical issue was found in the create upload file function of the backend/api/file.py file, leading to path traversal. The exploit has been disclosed to...
CVE-2025-6282: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in xlang-ai OpenAgents up to ff2e46440699af1324eb25655b622c4a131265bb and classified as critical. Affected by this issue is the function createuploadfile of the file backend/api/file.py. The manipulation leads to path traversal. The exploit has been disclosed to the publ...
CVE-2024-34524
In XLANG OpenAgents through fe73ac4, the allowedfile protection mechanism can be bypassed by using an incorrect file extension for the nature of the file content...
CVE-2024-34524: Authentication Bypass Using an Alternate Path or Channel
In XLANG OpenAgents through fe73ac4, the allowedfile protection mechanism can be bypassed by using an incorrect file extension for the nature of the file content...
CVE-2024-34524
In XLANG OpenAgents through fe73ac4, the allowedfile protection mechanism can be bypassed by using an incorrect file extension for the nature of the file content...
CVE-2024-34524
In XLANG OpenAgents through fe73ac4, the allowedfile protection mechanism can be bypassed by using an incorrect file extension for the nature of the file content...
OpenAgents 安全漏洞
OpenAgents is an open language agent platform from xlang-ai open source. A security vulnerability exists in OpenAgents fe73ac4 and earlier versions, which stems from a vulnerability that allows an attacker to bypass the allowedfile protection mechanism by using an incorrect file extension...
CVE-2024-34524
XLANG OpenAgents (versions through fe73ac4 ) is vulnerable to a security flaw where the allowed_file protection mechanism can be bypassed. An attacker can achieve this bypass by providing an incorrect file extension that does not match the actual nature of the file content. The impact is characte...