CVE-2024-34524

2024-05-0500:00:00

mitre

github.com

xlang

openagents

allowed_file protection

AI Score

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

In XLANG OpenAgents through fe73ac4, the allowed_file protection mechanism can be bypassed by using an incorrect file extension for the nature of the file content.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:xlang:open_agents:fe73ac4:*:*:*:*:*:*:*"
    ],
    "vendor": "xlang",
    "product": "open_agents",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "fe73ac4"
      }
    ],
    "defaultStatus": "unknown"
  }
]