OpenBMB vulnerabilities
15 published CVEs name OpenBMB among the affected products.
- 15Published CVEs15 of them scored
- 13Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-123964
OpenBMB Internet of Agents Collaboration Layer communication_layer.py launch_goal infinite loop
OpenBMB · Internet of Agents
Medium5.3 - CVE-2026-123963
OpenBMB Internet of Agents Agent Registry app.py register missing authentication
OpenBMB · Internet of Agents
Medium6.9 - CVE-2026-123881
OpenBMB Internet of Agents Message app.py fetch_chat_record access control
OpenBMB · Internet of Agents
Medium6.9 - CVE-2026-123791
OpenBMB Internet of Agents Agent Registry milvus_utils.py _primary_field_query data query logic injection
OpenBMB · Internet of Agents
Medium6.9 - CVE-2026-123675
OpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injection
OpenBMB · Internet of Agents
Medium6.9 - CVE-2026-123032
OpenBMB Internet of Agents WebSocket Connection Manager app.py ConnectionManager.connect missing authentication
OpenBMB · Internet of Agents
Medium6.9 - CVE-2026-111636
OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret
OpenBMB · StaffDeck
Critical9.2 - CVE-2026-72713
XAgent Path Traversal Arbitrary File Read via /workspace/file
OpenBMB · XAgent
High8.7 - CVE-2026-58166
OpenBMB ChatDev - Unauthenticated Path Traversal in Upload Handler Allows Arbitrary File Write and Delete
OpenBMB · ChatDev
High8.8 - CVE-2026-4959
OpenBMB XAgent ShareServer WebSocket Endpoint share.py check_user missing authentication
OpenBMB · XAgent
Medium6.9