Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

OpenBMB vulnerabilities

15 published CVEs name OpenBMB among the affected products.

Newest CVEs

  • CVE-2026-123964

    OpenBMB Internet of Agents Collaboration Layer communication_layer.py launch_goal infinite loop

    OpenBMB · Internet of Agents

    Medium5.3
  • CVE-2026-123963

    OpenBMB Internet of Agents Agent Registry app.py register missing authentication

    OpenBMB · Internet of Agents

    Medium6.9
  • CVE-2026-123881

    OpenBMB Internet of Agents Message app.py fetch_chat_record access control

    OpenBMB · Internet of Agents

    Medium6.9
  • CVE-2026-123791

    OpenBMB Internet of Agents Agent Registry milvus_utils.py _primary_field_query data query logic injection

    OpenBMB · Internet of Agents

    Medium6.9
  • CVE-2026-123675

    OpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injection

    OpenBMB · Internet of Agents

    Medium6.9
  • CVE-2026-123032

    OpenBMB Internet of Agents WebSocket Connection Manager app.py ConnectionManager.connect missing authentication

    OpenBMB · Internet of Agents

    Medium6.9
  • CVE-2026-111636

    OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret

    OpenBMB · StaffDeck

    Critical9.2
  • CVE-2026-72713

    XAgent Path Traversal Arbitrary File Read via /workspace/file

    OpenBMB · XAgent

    High8.7
  • CVE-2026-58166

    OpenBMB ChatDev - Unauthenticated Path Traversal in Upload Handler Allows Arbitrary File Write and Delete

    OpenBMB · ChatDev

    High8.8
  • CVE-2026-4959

    OpenBMB XAgent ShareServer WebSocket Endpoint share.py check_user missing authentication

    OpenBMB · XAgent

    Medium6.9