CVE-2026-72713
XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the `file_name` form field with no path containment check. Attackers can register an account without email verification, then submit crafted `file_name` values such as parent-directory traversal sequences to the `/workspace/file` handler to read host files including application secrets, database credentials, and system files outside the Docker sandbox.
Schwachstellenklasse
XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the `file_name` form field with no path containment check. Attackers can register an account without email verification, then submit crafted `file_name` values such as parent-directory traversal sequences to the `/workspace/file` handler to read host files including application secrets, database credentials, and system files outside the Docker sandbox.
Quellen
- https://github.com/OpenBMB/XAgent
- https://github.com/OpenBMB/XAgent/commit/26f2b6edc75127af524f027c022b382967178e3a
- https://github.com/OpenBMB/XAgent/issues/429
- https://github.com/OpenBMB/XAgent/pull/432
- https://www.vulncheck.com/advisories/xagent-path-traversal-arbitrary-file-read-via-workspace-file
- https://github.com/OpenBMB/XAgent/issues/429
Finden Sie die Schwachstelle, bevor es ein Angreifer tut.
Melden Sie sich mit GitHub an und starten Sie Ihr erstes Audit in weniger als einer Minute. Für den kostenlosen Plan ist keine Kreditkarte nötig.