Openbmb vulnerabilities

Products

• Xagent 8
• Internet Of Agents 6

Newest

• openbmb internet of agents OpenBMB Internet of Agents Collaboration Layer communication_layer.py launch_goal infinite loop CVE-2026-123964 5.3 MediumNovember 7, 2026
• openbmb internet of agents OpenBMB Internet of Agents Agent Registry app.py register missing authentication CVE-2026-123963 6.9 MediumNovember 7, 2026
• openbmb internet of agents OpenBMB Internet of Agents Message app.py fetch_chat_record access control CVE-2026-123881 6.9 MediumNovember 7, 2026
• openbmb internet of agents OpenBMB Internet of Agents Agent Registry milvus_utils.py _primary_field_query data query logic injection CVE-2026-123791 6.9 MediumNovember 6, 2026
• openbmb internet of agents OpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injection CVE-2026-123675 6.9 MediumNovember 6, 2026
• openbmb internet of agents OpenBMB Internet of Agents WebSocket Connection Manager app.py ConnectionManager.connect missing authentication CVE-2026-123032 6.9 MediumNovember 5, 2026
• openbmb staffdeck OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret CVE-2026-111636 9.2 CriticalOctober 16, 2026
• openbmb xagent XAgent Path Traversal Arbitrary File Read via /workspace/file CVE-2026-72713 8.7 HighAugust 11, 2026
• openbmb chatdev OpenBMB ChatDev - Unauthenticated Path Traversal in Upload Handler Allows Arbitrary File Write and Delete CVE-2026-58166 8.8 HighJune 30, 2026
• openbmb xagent OpenBMB XAgent ShareServer WebSocket Endpoint share.py check_user missing authentication CVE-2026-4959 6.9 MediumMarch 27, 2026
• openbmb xagent OpenBMB XAgent WebSocket Endpoint replayer.py ReplayServer.send_data authorization CVE-2026-4958 2.3 LowMarch 27, 2026
• openbmb xagent OpenBMB XAgent API Key function_handler.py FunctionHandler.handle_tool_call log file CVE-2026-4957 5.1 MediumMarch 27, 2026
• openbmb xagent OpenBMB XAgent workspace.py workspace path traversal CVE-2026-3954 6.9 MediumMarch 11, 2026
• openbmb xagent OpenBMB XAgent community path traversal CVE-2025-6281 5.1 MediumJune 19, 2025
• openbmb xagent OpenBMB XAgent Privileged Mode sandbox CVE-2024-2007 5.3 MediumFebruary 29, 2024
• openbmb xagent, trellix endpoint security +1 more Trellix xAgent permission bypass vulnerability CVE-2022-4326 5.5 MediumDecember 16, 2022