CVE-2026-4958

LowCVSS 3.1

Published: 27/03/2026(UTC)Updated: 26/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

34th percentile - higher than 34% of all known CVEs

Summary

A vulnerability has been found in OpenBMB XAgent 1.0.0. The ReplayServer.on_connect/ReplayServer.send_data functions in XAgentServer/application/websockets/replayer.py of the WebSocket Endpoint component, when manipulating the interaction_id argument, lead to authorization bypass. The attack may be launched remotely, is highly complex, and the exploit has been publicly disclosed.

Risk Assessment

Authorization bypass may enable unauthorized access to WebSocket server functionality. The public exploit increases the risk of exploitation.

Recommendation

Update XAgent to a patched version or restrict access to the WebSocket endpoint. Validate the interaction_id argument server-side.

Other vulnerabilities in XAgent

CVE-2026-72713High
XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the `file_name` form field with no path containment check. Attackers can register an account without email verification, then submit crafted `file_name` values to the `/workspace/file` handler to read host files including application secrets, database credentials, and system files outside the Docker sandbox.

Original NVD description (English source)

A vulnerability has been found in OpenBMB XAgent 1.0.0. This affects the function ReplayServer.on_connect/ReplayServer.send_data of the file XAgentServer/application/websockets/replayer.py of the component WebSocket Endpoint. Such manipulation of the argument interaction_id leads to authorization bypass. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is reported as difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS