OpenBMB XAgent vulnerabilities

OpenBMB XAgent v1.0.0 contains a directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46). This may allow access to files outside the intended directory.

OpenBMB XAgent version 1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” is user-controllable and is concatenated into the file path without proper validation, allowing directory traversal that may lead to sensitive information disclosure.

A flaw was found in OpenBMB XAgent 1.0.0 in the FunctionHandler.handle_tool_call function in XAgent/function_handler.py, related to API key handling. Manipulation of the api_key argument causes sensitive information to be exposed in log files. The exploit has been publicly disclosed, and the vendor did not respond.