Product by OpenBMB

    OpenBMB XAgent

    7 known vulnerabilities in OpenBMB XAgent (OpenBMB), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in OpenBMB XAgent (OpenBMB)
    HighCVE-2026-72713

    XAgent Path Traversal Arbitrary File Read via /workspace/file

    		7.5
    HighCVE-2026-4959

    OpenBMB XAgent ShareServer WebSocket Endpoint share.py check_user missing authentication

    		7.5
    MediumCVE-2026-3954

    OpenBMB XAgent workspace.py workspace path traversal

    		6.5
    MediumCVE-2026-4958

    OpenBMB XAgent WebSocket Endpoint replayer.py ReplayServer.send_data authorization

    		6.5
    MediumCVE-2025-6281

    OpenBMB XAgent community path traversal

    		5.5
    HighCVE-2024-2007

    OpenBMB XAgent Privileged Mode sandbox

    		5.3
    LowCVE-2026-4957

    OpenBMB XAgent API Key function_handler.py FunctionHandler.handle_tool_call log file

    		2.7

    All products by OpenBMB