Openbmb

    Dashboard / Vendors

    Products: 4
    Vulnerabilities: 11
    Known Exploited: 0
    2
    Critical Level Threats
    4
    High Level Threats
    3
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-123032

    OpenBMB Internet of Agents WebSocket Connection Manager app.py ConnectionManager.connect missing authentication

    Last Modified: Nov 05, 2026
    Published: Nov 05, 2026

    CVE-2026-51912

    OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46).

    Last Modified: Nov 04, 2026
    Published: Oct 29, 2026

    CVE-2026-111636

    OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret

    Last Modified: Oct 26, 2026
    Published: Oct 16, 2026

    CVE-2026-72713

    XAgent Path Traversal Arbitrary File Read via /workspace/file

    Last Modified: Aug 12, 2026
    Published: Aug 11, 2026

    CVE-2026-58166

    OpenBMB ChatDev - Unauthenticated Path Traversal in Upload Handler Allows Arbitrary File Write and Delete

    Last Modified: Jul 01, 2026
    Published: Jun 30, 2026
    Items Per Page
    Openbmb Vulnerabilities & Security CVEs | CVE-DB