CVE-2026-4957
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A flaw was found in OpenBMB XAgent 1.0.0 in the FunctionHandler.handle_tool_call function in XAgent/function_handler.py, related to API key handling. Manipulation of the api_key argument causes sensitive information to be exposed in log files. The exploit has been publicly disclosed, and the vendor did not respond.
Risk Assessment
API keys may leak into logs, enabling an attacker to gain unauthorized access to services and data. Since the exploit is public, the risk of exploitation is high.
Recommendation
Restrict access to log files and consider applying patches or workarounds (e.g., disabling logging of sensitive data). Monitor logs for API key leakage.
Other vulnerabilities in OpenBMB XAgent
See all- CVE-2026-51912Critical
OpenBMB XAgent v1.0.0 contains a directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46). This may allow access to files outside the intended directory.
- CVE-2026-26396High
OpenBMB XAgent version 1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” is user-controllable and is concatenated into the file path without proper validation, allowing directory traversal that may lead to sensitive information disclosure.
Original NVD description (English source)
A flaw has been found in OpenBMB XAgent 1.0.0. The impacted element is the function FunctionHandler.handle_tool_call of the file XAgent/function_handler.py of the component API Key Handler. This manipulation of the argument api_key causes sensitive information in log files. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS