Vendors / OpenBMB Records 13 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now OpenBMB records in CISA KEV No OpenBMB vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 77
XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the `fil…
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00835 · Published 2026-08-11 · Fixed in 26f2b6e CWE-22
Priority HIGH 77
OpenBMB ChatDev through 2.2.0, fixed in commit 4fd4da6, contains a path traversal vulnerability that allows unauthenticated remote attackers to write or delete arbitrary files by supplying a malicious multipart filename…
CVSS 4.0 HIGH 8.8· Network · No auth · No interaction · EPSS 0.00854 · Published 2026-06-30 · Fixed CWE-22
Priority HIGH 71
A vulnerability was found in OpenBMB XAgent 1.0.0.
CVSS 3.1 HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00276 · Published 2024-02-29 · No fix listed CWE-265
Priority HIGH 70
A flaw has been found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00473 · Published 2026-11-06 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in OpenBMB XAgent 1.0.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00447 · Published 2026-03-27 · No fix listed CWE-287
Priority HIGH 70
A weakness has been identified in OpenBMB XAgent 1.0.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00545 · Published 2026-03-11 · No fix listed CWE-22
Priority MEDIUM 56
A flaw has been found in OpenBMB XAgent 1.0.0.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00291 · Published 2026-03-27 · No fix listed CWE-200
Priority MEDIUM 56
A vulnerability has been found in OpenBMB XAgent up to 1.0.0 and classified as critical.
CVSS 4.0 MEDIUM 5.1· Adjacent network · Low privileges · No interaction · EPSS 0.0046 · Published 2025-06-19 · No fix listed CWE-22
Priority MEDIUM 45
A vulnerability has been found in OpenBMB XAgent 1.0.0.
CVSS 4.0 LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00398 · Published 2026-03-27 · No fix listed CWE-285
Priority MEDIUM 42
OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default app_secret.
CVSS 4.0 CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00402 · Published 2026-10-16 · No fix listed CWE-321
Priority LOW 37
A security flaw has been discovered in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00582 · Published 2026-11-05 · No fix listed CWE-287
Priority LOW 30
A vulnerability was found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00278 · Published 2026-11-07 · No fix listed CWE-266
Priority LOW 30
A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00304 · Published 2026-11-06 · No fix listed CWE-20
Open these records in search → All records by CVSS severity
1 3 8 1 0
THREATIST.IORead the docs