CVE-2026-3954

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-3954", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-03-11T12:27:50.953Z", "datePublished": "2026-03-11T20:02:08.067Z", "dateUpdated": "2026-03-12T19:51:41.759Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-03-11T20:02:08.067Z"}, "title": "OpenBMB XAgent workspace.py workspace path traversal", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-22", "lang": "en", "description": "Path Traversal"}]}], "affected": [{"vendor": "OpenBMB", "product": "XAgent", "versions": [{"version": "1.0.0", "status": "affected"}], "cpes": ["cpe:2.3:a:openbmb:xagent:*:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "A weakness has been identified in OpenBMB XAgent 1.0.0. Affected by this vulnerability is the function workspace of the file XAgentServer/application/routers/workspace.py. This manipulation of the argument file_name causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.5, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.4, "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-03-11T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-03-11T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-03-11T13:32:56.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Eric-x (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/?id.350384", "name": "VDB-350384 | OpenBMB XAgent workspace.py workspace path traversal", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.350384", "name": "VDB-350384 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.767236", "name": "Submit #767236 | OpenBMB XAgent 1.0.0 Path Traversal (CWE-22)", "tags": ["third-party-advisory"]}, {"url": "https://github.com/OpenBMB/XAgent/issues/420", "tags": ["issue-tracking"]}, {"url": "https://github.com/OpenBMB/XAgent/issues/420#issue-3987904488", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/OpenBMB/XAgent/", "tags": ["product"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-12T19:51:35.428596Z", "id": "CVE-2026-3954", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-12T19:51:41.759Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-3954", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-12T19:51:35.428596Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-12T19:51:39.006Z"}}], "cna": {"title": "OpenBMB XAgent workspace.py workspace path traversal", "credits": [{"lang": "en", "type": "reporter", "value": "Eric-x (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.4, "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:openbmb:xagent:*:*:*:*:*:*:*:*"], "vendor": "OpenBMB", "product": "XAgent", "versions": [{"status": "affected", "version": "1.0.0"}]}], "timeline": [{"lang": "en", "time": "2026-03-11T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-03-11T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-03-11T13:32:56.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/?id.350384", "name": "VDB-350384 | OpenBMB XAgent workspace.py workspace path traversal", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.350384", "name": "VDB-350384 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.767236", "name": "Submit #767236 | OpenBMB XAgent 1.0.0 Path Traversal (CWE-22)", "tags": ["third-party-advisory"]}, {"url": "https://github.com/OpenBMB/XAgent/issues/420", "tags": ["issue-tracking"]}, {"url": "https://github.com/OpenBMB/XAgent/issues/420#issue-3987904488", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/OpenBMB/XAgent/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A weakness has been identified in OpenBMB XAgent 1.0.0. Affected by this vulnerability is the function workspace of the file XAgentServer/application/routers/workspace.py. This manipulation of the argument file_name causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "Path Traversal"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-03-11T20:02:08.067Z"}}}, "cveMetadata": {"cveId": "CVE-2026-3954", "state": "PUBLISHED", "dateUpdated": "2026-03-12T19:51:41.759Z", "dateReserved": "2026-03-11T12:27:50.953Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-03-11T20:02:08.067Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:openbmb:xagent:*:*:*:*:*:*:*:*"], "product": "XAgent", "vendor": "OpenBMB", "versions": [{"status": "affected", "version": "1.0.0"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A weakness has been identified in OpenBMB XAgent 1.0.0. Affected by this vulnerability is the function workspace of the file XAgentServer/application/routers/workspace.py. This manipulation of the argument file_name causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet."}, {"lang": "es", "value": "Se ha identificado una debilidad en OpenBMB XAgent 1.0.0. Afectada por esta vulnerabilidad es la funci\u00f3n workspace del archivo XAgentServer/application/routers/workspace.py. Esta manipulaci\u00f3n del argumento file_name causa salto de ruta. El ataque puede ser iniciado remotamente. El exploit ha sido puesto a disposici\u00f3n del p\u00fablico y podr\u00eda ser usado para ataques. El proyecto fue informado del problema tempranamente a trav\u00e9s de un informe de incidencias pero a\u00fan no ha respondido."}], "id": "CVE-2026-3954", "lastModified": "2026-06-17T10:44:30.300", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.4, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 2.5, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-3954", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-12T19:51:35.428596Z", "version": "2.0.3"}}]}, "published": "2026-03-11T20:16:23.477", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/OpenBMB/XAgent/"}, {"source": "cna@vuldb.com", "url": "https://github.com/OpenBMB/XAgent/issues/420"}, {"source": "cna@vuldb.com", "url": "https://github.com/OpenBMB/XAgent/issues/420#issue-3987904488"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?ctiid.350384"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?id.350384"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?submit.767236"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.0.0"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "XAgent", "source": "cna", "vendor": "OpenBMB"}, "product": "xagent", "vendor": "openbmb"}], "analysis": {"en": {"generated_at": "2026-03-17T16:26:42.312745+00:00", "value": {"mitigation_remediation": ["Update OpenBMB XAgent to a version that removes the path traversal flaw (if available).", "If no patch exists, modify the workspace function to sanitize or whitelist file_name inputs, rejecting any traversal sequences such as \"..\" or absolute paths.", "Restrict the workspace directory to a protected, non-privileged location to limit potential damage.", "Apply network segmentation or firewall rules to limit exposure of the XAgent service to trusted hosts."], "summary": {"action": "Apply patch", "impact": "Directory Traversal (Remote)"}, "threat_synthesis": {"affected_systems": "The affected product is OpenBMB XAgent, specifically version 1.0.0. No extended version matrix was provided by the CNA. Users running this version or newer unpatched variants are at risk. ", "description_and_impact": "OpenBMB XAgent 1.0.0 contains a flaw in the workspace function of workspace.py. The function blindly processes the file_name argument, allowing an attacker to craft a path that traverses outside the intended workspace directory. This leads to directory traversal, which can expose sensitive files or system configuration data. The weakness is classified as CWE-22, a common path traversal vulnerability. ", "risk_and_exploitability": "The CVSS score of 6.9 indicates a high impact severity. The EPSS score is below 1%, showing low current exploit probability, and the vulnerability is not listed in the CISA KEV catalog. However, the vulnerability is publicly available and can be remotely triggered by manipulating the file_name argument, making it potentially exploitable by adversaries with network access to the service. The overall risk is moderate to high, particularly for environments exposed to the internet without hardened input validation."}}}}, "created": "2026-03-12T09:56:18.889416+00:00", "updated": "2026-03-20T15:37:24.471862+00:00", "vendors": ["openbmb", "openbmb$PRODUCT$xagent"]}