EUVD-2026-16690Severity by source
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionCVE.org
A vulnerability has been found in OpenBMB XAgent 1.0.0. This affects the function ReplayServer.on_connect/ReplayServer.send_data of the file XAgentServer/application/websockets/replayer.py of the component WebSocket Endpoint. Such manipulation of the argument interaction_id leads to authorization bypass. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is reported as difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
OpenBMB XAgent 1.0.0 allows authenticated remote attackers to bypass authorization controls via manipulation of the interaction_id argument in the WebSocket ReplayServer endpoint (XAgentServer/application/websockets/replayer.py), enabling unauthorized access to replay functionality. The vulnerability requires low privileges and is difficult to exploit due to high attack complexity, but publicly available exploit code exists. No vendor patch has been released despite early disclosure notification.
Technical ContextAI
The vulnerability exists in OpenBMB XAgent's WebSocket implementation, specifically the ReplayServer.on_connect and ReplayServer.send_data functions. The root cause is classified under CWE-639 (Authorization Bypass Through User-Controlled Key), indicating improper validation of user-supplied interaction_id parameters that should be subject to authorization checks before granting access to replay data. The WebSocket endpoint accepts client-controlled interaction_id values without sufficient authorization validation, allowing authenticated users to access replay sessions belonging to other users or contexts. This is a classic broken access control vulnerability at the application layer where the server trusts client-supplied identifiers without verifying that the requesting principal has permission to access the associated resource.
RemediationAI
No vendor-released patch has been identified at time of analysis; OpenBMB did not respond to early disclosure notifications. Interim mitigations include: (1) restricting WebSocket endpoint access via network-level controls to trusted client IP ranges, (2) implementing an additional authorization layer in front of the WebSocket server that validates interaction_id ownership before routing requests, (3) deploying a reverse proxy with strict input validation to sanitize or reject suspicious interaction_id manipulation patterns, and (4) monitoring WebSocket traffic for anomalous cross-user interaction_id access attempts. Organizations should contact OpenBMB directly for patch availability and timeline, and consider migrating to alternative tools if no patch becomes available within a defined timeframe.
OpenBMB XAgent 1.0.0 ShareServer WebSocket endpoint allows remote authentication bypass through manipulation of the inte
A vulnerability was found in OpenBMB XAgent 1.0.0. Rated high severity (CVSS 8.8), this vulnerability is low attack comp
Path traversal vulnerability in OpenBMB XAgent up to version 1.0.0 allows attackers to read arbitrary files via the /con
OpenBMB XAgent 1.0.0 exposes sensitive API credentials in log files through improper handling of the api_key argument in
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today