Vulnerabilities

TI-2026-04320 CVE-2026-4959 · GHSA-7355-47hq-rrv2

OpenBMB XAgent ShareServer WebSocket Endpoint share.py check_user missing authentication

HIGH 70

A vulnerability was found in OpenBMB XAgent 1.0.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00447 Published 2026-03-27 No fix listed CWE-287

TI-2026-04319 CVE-2026-4958 · GHSA-pj48-vv9m-5qqf

MEDIUM 45

A vulnerability has been found in OpenBMB XAgent 1.0.0.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00398 Published 2026-03-27 No fix listed CWE-285

TI-2026-04318 CVE-2026-4957 · GHSA-hp6g-348q-ppq3

MEDIUM 56

A flaw has been found in OpenBMB XAgent 1.0.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00291 Published 2026-03-27 No fix listed CWE-200

TI-2025-05683 CVE-2025-6281 · GHSA-qgjq-qw4q-mfpv

MEDIUM 56

A vulnerability has been found in OpenBMB XAgent up to 1.0.0 and classified as critical.

CVSS 4.0MEDIUM 5.1 Adjacent network Low privileges No interaction EPSS 0.0046 Published 2025-06-19 No fix listed CWE-22

TI-2024-01867 CVE-2024-2007 · GHSA-wq2q-fqq7-mgvw

HIGH 71

A vulnerability was found in OpenBMB XAgent 1.0.0.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00276 Published 2024-02-29 No fix listed CWE-265