Vulnerability · Published Aug 11, 2026 · Assigned by VulnCheck

CVE-2026-72713XAgent Path Traversal Arbitrary File Read via /workspace/file

High 7.5

In plain English

A high-severity path traversal in XAgent from OpenBMB. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.8%top 42.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the `file_name` form field with no path containment check. Attackers can register an account without email verification, then submit crafted `file_name` values such as parent-directory traversal sequences to the `/workspace/file` handler to read host files including application secrets, database credentials, and system files outside the Docker sandbox.

Affected products (as reported)

Vendor	Product	Versions
OpenBMB	XAgent	0 – before 26f2b6e

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

Product Repository product
GitHub Issue issue-tracking
Patch Commit patch
Pull Request product
https://www.vulncheck.com/advisories/xagent-path-traversal-arbitrary-file-read-via-workspace-file third-party-advisory