Skip to content
OpenAdvisories

Vendor

OpenBMB

15 known vulnerabilities.

Products

XAgent 7 Internet of Agents 6 ChatDev 1 StaffDeck 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.1
    CVE-2026-4958

    OpenBMB XAgent WebSocket Endpoint replayer.py ReplayServer.send_data authorization

    A vulnerability has been found in OpenBMB XAgent 1.0.0. This affects the function ReplayServer.on_connect/ReplayServer.send_data of the file XAgentServer/application/websockets/replayer.py of the component WebSocket Endpoint. Such manipulation of the argument…

    OpenBMB XAgent
  • Low 2.7
    CVE-2026-4957

    OpenBMB XAgent API Key function_handler.py FunctionHandler.handle_tool_call log file

    A flaw has been found in OpenBMB XAgent 1.0.0. The impacted element is the function FunctionHandler.handle_tool_call of the file XAgent/function_handler.py of the component API Key Handler. This manipulation of the argument api_key causes sensitive informatio…

    OpenBMB XAgent