CVE-2026-26396
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
OpenBMB XAgent version 1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” is user-controllable and is concatenated into the file path without proper validation, allowing directory traversal that may lead to sensitive information disclosure.
Risk Assessment
The risk involves potential disclosure of sensitive information such as configuration files, credentials, or source code by manipulating the filename parameter.
Recommendation
Immediately update OpenBMB XAgent to a version newer than 1.0.0 or apply a security patch that validates and sanitizes the filename parameter before using it in the file path.
Other vulnerabilities in OpenBMB XAgent
See all- CVE-2026-51912Critical
OpenBMB XAgent v1.0.0 contains a directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46). This may allow access to files outside the intended directory.
- CVE-2026-4957Low
A flaw was found in OpenBMB XAgent 1.0.0 in the FunctionHandler.handle_tool_call function in XAgent/function_handler.py, related to API key handling. Manipulation of the api_key argument causes sensitive information to be exposed in log files. The exploit has been publicly disclosed, and the vendor did not respond.
Original NVD description (English source)
OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” is user-controllable and is concatenated into the file path to be read without proper validation, leading to a directory traversal vulnerability that may result in sensitive information disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS