Vendor

    OpenBMB

    11 known vulnerabilities in products by OpenBMB, 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in OpenBMB
    HighCVE-2026-72713

    XAgent Path Traversal Arbitrary File Read via /workspace/file

    		7.5
    CriticalCVE-2026-58166

    OpenBMB ChatDev: Path Traversal

    		9.1
    CriticalCVE-2026-111636

    OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret

    		8.1
    HighCVE-2026-123675

    OpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injection

    		8.3
    HighCVE-2026-123032

    OpenBMB Internet of Agents: Missing Authentication for Critical Function

    		7.3
    HighCVE-2026-4959

    OpenBMB XAgent ShareServer WebSocket Endpoint share.py check_user missing authentication

    		7.5
    MediumCVE-2026-3954

    OpenBMB XAgent workspace.py workspace path traversal

    		6.5
    MediumCVE-2026-4958

    OpenBMB XAgent WebSocket Endpoint replayer.py ReplayServer.send_data authorization

    		6.5
    MediumCVE-2025-6281

    OpenBMB XAgent community path traversal

    		5.5
    HighCVE-2024-2007

    OpenBMB XAgent Privileged Mode sandbox

    		5.3
    LowCVE-2026-4957

    OpenBMB XAgent API Key function_handler.py FunctionHandler.handle_tool_call log file

    		2.7

    News

    Products

    Products by OpenBMB
    OpenBMB XAgent70