EUVD-2026-16658
GHSA-hp6g-348q-ppq3
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V14 - Data Protection Data exposure prevention
MITRE ATT&CK
2 techniques across 2 tactics: Collection, Discovery The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | The CVSS 4.0 vector indicates remote network-based attack (AV:N) with low complexity (AC:L) requiring high privileges (PR:H) and no user interaction (UI:N), resulting in low confidentiality impact (VC:L). The exploitation phase is marked as published (E:P), confirming public exploit code availability. While the CVSS base score of 5.1 appears moderate, the real-world risk is elevated by two factors: (1) the public availability of exploit code lowers the barrier to exploitation, and (2) the requirement for high privileges (PR:H) significantly constrains the threat actor pool to administrators or highly privileged users already within the trust boundary. The information disclosure impact is limited to confidentiality with no integrity or availability impact. This vulnerability should be prioritized for patching in environments where XAgent is deployed with sensitive API keys, but it does not represent a critical threat to unauthenticated or low-privilege users. |
| Exploit ScenarioDerived | A system administrator with high-privilege access to an OpenBMB XAgent deployment intentionally or unintentionally reviews application log files (via direct file access, log aggregation platform, or monitoring dashboard) and extracts plaintext API credentials that were logged as a side effect of the handle_tool_call function processing API key arguments. The attacker then uses the extracted credentials to authenticate to third-party services or APIs that the XAgent instance communicates with, enabling lateral movement or unauthorized data access. Publicly available exploit code exists that documents or automates this credential extraction from logs. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 27, 2026
OpenBMB XAgent 1.0.0 exposes sensitive API credentials in log files through improper handling of the api_key argument in the FunctionHandler.handle_tool_call function, allowing remote authenticated attackers with high privileges to disclose confidential information. The vulnerability is classified as information disclosure (CWE-200) with a CVSS score of 5.1 and has publicly available exploit code; however, the vendor has not responded to early disclosure notification.
RemediationAI
Upgrade OpenBMB XAgent to a patched version if available from the vendor; however, no specific fix version is confirmed in the provided intelligence data, and the vendor has not responded to early disclosure attempts. Immediate interim mitigations should include: (1) restricting access to application log files to the minimum set of authorized users, (2) implementing log redaction or masking rules to automatically sanitize API keys from log output before persistence, (3) using environment variables or secure configuration management systems (e.g., HashiCorp Vault, AWS Secrets Manager) to inject API credentials at runtime rather than passing them as function arguments, and (4) monitoring log files for accidental credential exposure. Monitor OpenBMB's official repository and the VulDB references at https://vuldb.com/?id.353834 for patch availability announcements.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability exists in the API Key Handler component of XAgent, specifically in the file XAgent/function_handler.py where the FunctionHandler.handle_tool_call function processes API key arguments without proper sanitization before logging. CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) indicates that confidential data-in this case cryptographic credentials-are being written to log files where they may be accessed by unauthorized parties. The root cause appears to be inadequate input sanitization and logging controls in the function's handling of the api_key parameter, which is then persisted in plaintext or insufficiently masked form in application logs accessible to high-privilege users.
Know when Xagent gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Primary rating from Vendor (vuldb) · only source for this CVE.
CVSS VectorVendor: vuldb
Lifecycle Timeline
3DescriptionCVE.org
A flaw has been found in OpenBMB XAgent 1.0.0. The impacted element is the function FunctionHandler.handle_tool_call of the file XAgent/function_handler.py of the component API Key Handler. This manipulation of the argument api_key causes sensitive information in log files. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Executive ViewAI
Organizations using A flaw should be aware of moderate risk from CVE-2026-4957, a information exposure vulnerability rated CVSS 5.1. Sensitive information could be exposed to unauthorized parties. Organizations should apply vendor updates when available and monitor for exploitation.
Apply vendor patch. If patching is delayed: restrict endpoint access, redact sensitive data in logs.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
OpenBMB XAgent 1.0.0 ShareServer WebSocket endpoint allows remote authentication bypass through manipulation of the inte
A vulnerability was found in OpenBMB XAgent 1.0.0. Rated high severity (CVSS 8.8), this vulnerability is low attack comp
OpenBMB XAgent 1.0.0 allows authenticated remote attackers to bypass authorization controls via manipulation of the inte
Path traversal vulnerability in OpenBMB XAgent up to version 1.0.0 allows attackers to read arbitrary files via the /con
Exploit-DB