TI-2026-86591 CVE-2026-123964 · GHSA-fgc9-94jf-v855
Infinite loop in OpenBMB Internet of Agents launch_goal via max_turns
Priority LOW 39
A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a.
Vulnerabilities
15 records
TI-2026-86579 CVE-2026-123963 · GHSA-wh52-m6f5-fj5w
Missing authentication in OpenBMB Internet of Agents Agent Registry
Priority MEDIUM 46
A security vulnerability has been detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a.
TI-2026-86452 CVE-2026-123881 · GHSA-7gvr-jhhp-xg9c
Improper access control in OpenBMB Internet of Agents message server
Priority LOW 30
A vulnerability was found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a.
TI-2026-86151 CVE-2026-123791 · GHSA-v6cp-c9hv-m87w
Query injection in OpenBMB Internet of Agents Agent Registry
Priority LOW 30
A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a.
TI-2026-85970 CVE-2026-123675 · GHSA-w43h-qvhf-jh65
Code injection in OpenBMB Internet of Agents Code Executor Tool
Priority HIGH 70
A flaw has been found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a.
TI-2026-85462 CVE-2026-123032 · GHSA-2w86-3j6h-v867
Missing authentication in OpenBMB Internet of Agents WebSocket manager
Priority LOW 37
A security flaw has been discovered in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a.
TI-2026-75422 CVE-2026-111636 · GHSA-m82j-2j7c-gx6q
OpenBMB StaffDeck Authentication Bypass via Hard-Coded Session Secret
Priority MEDIUM 42
OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default app_secret.
TI-2026-50949 CVE-2026-72713 · GHSA-c7q4-h75g-2c94
XAgent Path Traversal Arbitrary File Read via /workspace/file
Priority HIGH 77
XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the `fil…
TI-2026-41884 CVE-2026-58166 · GHSA-hh77-fhmp-pqfv
OpenBMB ChatDev - Unauthenticated Path Traversal in Upload Handler Allows Arbitrary File Write and Delete
Priority HIGH 77
OpenBMB ChatDev through 2.2.0, fixed in commit 4fd4da6, contains a path traversal vulnerability that allows unauthenticated remote attackers to write or delete arbitrary files by supplying a malicious multipart filename…
TI-2026-04320 CVE-2026-4959 · GHSA-7355-47hq-rrv2
OpenBMB XAgent ShareServer WebSocket Endpoint share.py check_user missing authentication
Priority HIGH 70
A vulnerability was found in OpenBMB XAgent 1.0.0.
TI-2026-04319 CVE-2026-4958 · GHSA-pj48-vv9m-5qqf
OpenBMB XAgent WebSocket Endpoint replayer.py ReplayServer.send_data authorization
Priority MEDIUM 45
A vulnerability has been found in OpenBMB XAgent 1.0.0.
TI-2026-04318 CVE-2026-4957 · GHSA-hp6g-348q-ppq3
OpenBMB XAgent API Key function_handler.py FunctionHandler.handle_tool_call log file
Priority MEDIUM 56
A flaw has been found in OpenBMB XAgent 1.0.0.
TI-2026-03418 CVE-2026-3954 · GHSA-6mcr-jrm3-347g
OpenBMB XAgent workspace.py workspace path traversal
Priority HIGH 70
A weakness has been identified in OpenBMB XAgent 1.0.0.
TI-2025-05683 CVE-2025-6281 · GHSA-qgjq-qw4q-mfpv
OpenBMB XAgent community path traversal
Priority MEDIUM 56
A vulnerability has been found in OpenBMB XAgent up to 1.0.0 and classified as critical.
TI-2024-01867 CVE-2024-2007 · GHSA-wq2q-fqq7-mgvw
OpenBMB XAgent Privileged Mode sandbox
Priority HIGH 71
A vulnerability was found in OpenBMB XAgent 1.0.0.