CVE-2026-4959

OpenBMB XAgent 1.0.0 contains a vulnerability in the ShareServer WebSocket Endpoint (XAgentServer/application/websockets/share.py, function check_user). Manipulating the argument interaction_id results in missing authentication, enabling remote exploitation. The exploit has been publicized, and t...

CVE-2026-4958

OpenBMB XAgent 1.0.0 contains a vulnerability in ReplayServer.on_connect/ReplayServer.send_data (XAgentServer/application/websockets/replayer.py, WebSocket Endpoint) where manipulating the interaction_id can bypass authorization. The incident is remotely exploitable and is described as highly com...

CVE-2025-6281

CVE-2025-6281 affects OpenBMB XAgent up to 1.0.0. Affected is an unknown functionality of the file /conv/community; manipulation leads to path traversal. Exploit has been disclosed publicly. Connected sources provide no specific patch/version fix details. The vulnerability details across sources ...

CVE-2024-2007

CVE-2024-2007 concerns OpenBMB XAgent 1.0.0, specifically a vulnerability in the Privileged Mode component that enables sandbox issues. The root cause is described as a sandboxing failure allowing local exploitation, with the attack vector labeled as LOCAL and user interaction not required. The e...

CVE-2026-4957

OpenBMB XAgent 1.0.0 is affected. The issue sits in the file XAgent/function_handler.py, inside the API Key Handler, specifically the function FunctionHandler.handle_tool_call . Manipulating the argument api_key can cause sensitive information to be written to log files. This enables a remote att...