Vulnerabilidades en OpenBMB
15 resultadosCVE-2026-58166HIGHOpenBMB ChatDev - Unauthenticated Path Traversal in Upload Handler Allows Arbitrary File Write and DeleteEPSS 0.9%CVE-2026-72713HIGHXAgent Path Traversal Arbitrary File Read via /workspace/fileEPSS 0.8%CVE-2026-123963MEDIUMOpenBMB Internet of Agents Agent Registry app.py register missing authenticationEPSS 0.6%CVE-2026-123032MEDIUMOpenBMB Internet of Agents WebSocket Connection Manager app.py ConnectionManager.connect missing authenticationEPSS 0.6%CVE-2026-3954MEDIUMOpenBMB XAgent workspace.py workspace path traversalEPSS 0.5%CVE-2026-123675MEDIUMOpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injectionEPSS 0.5%CVE-2025-6281MEDIUMOpenBMB XAgent community path traversalEPSS 0.5%CVE-2026-123964MEDIUMOpenBMB Internet of Agents Collaboration Layer communication_layer.py launch_goal infinite loopEPSS 0.5%CVE-2026-4959MEDIUMOpenBMB XAgent ShareServer WebSocket Endpoint share.py check_user missing authenticationEPSS 0.4%CVE-2026-111636CRITICALOpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session SecretEPSS 0.4%CVE-2026-4958LOWOpenBMB XAgent WebSocket Endpoint replayer.py ReplayServer.send_data authorizationEPSS 0.4%CVE-2026-123791MEDIUMOpenBMB Internet of Agents Agent Registry milvus_utils.py _primary_field_query data query logic injectionEPSS 0.3%CVE-2026-4957MEDIUMOpenBMB XAgent API Key function_handler.py FunctionHandler.handle_tool_call log fileEPSS 0.3%CVE-2026-123881MEDIUMOpenBMB Internet of Agents Message app.py fetch_chat_record access controlEPSS 0.3%CVE-2024-2007MEDIUMOpenBMB XAgent Privileged Mode sandboxEPSS 0.3%