CVE-2026-51912
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
OpenBMB XAgent v1.0.0 contains a directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46). This may allow access to files outside the intended directory.
Risk Assessment
An attacker could exploit directory traversal to read or write files outside the permitted area, potentially leading to data disclosure or modification. This affects the integrity and confidentiality of the system.
Recommendation
Update OpenBMB XAgent to a version containing the fix or apply path-restricting mitigations. Validate user-supplied file paths.
Other vulnerabilities in OpenBMB XAgent
See all- CVE-2026-26396High
OpenBMB XAgent version 1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” is user-controllable and is concatenated into the file path without proper validation, allowing directory traversal that may lead to sensitive information disclosure.
- CVE-2026-4957Low
A flaw was found in OpenBMB XAgent 1.0.0 in the FunctionHandler.handle_tool_call function in XAgent/function_handler.py, related to API key handling. Manipulation of the api_key argument causes sensitive information to be exposed in log files. The exploit has been publicly disclosed, and the vendor did not respond.
Original NVD description (English source)
OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS