Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

OpenBMB Vulnerabilities & CVE List (Nov 2026) | CyStack

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-123964`OpenBMB Internet of Agents Collaboration Layer communication_layer.py launch_goal infinite loop	Exploitation statusActively exploited	FixNo	Affected productInternet of Agents	Published11/07/2026	SeverityMedium
`CVE-2026-123963`OpenBMB Internet of Agents Agent Registry app.py register missing authentication	Exploitation statusActively exploited	FixNo	Affected productInternet of Agents	Published
`CVE-2026-123881`Improper access control in OpenBMB Internet of Agents Message Handler enables unauthorized chat-record access	Exploitation statusActively exploited	FixNo	Affected productInternet of Agents
`CVE-2026-123791`OpenBMB Internet of Agents Agent Registry milvus_utils.py _primary_field_query data query logic injection	Exploitation statusActively exploited	FixNo	Affected productInternet of Agents
`CVE-2026-123675`OpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injection	Exploitation statusActively exploited	FixNo	Affected productInternet of Agents	Published
`CVE-2026-123032`OpenBMB Internet of Agents WebSocket Connection Manager app.py ConnectionManager.connect missing authentication	Exploitation statusActively exploited	FixNo	Affected productInternet of Agents
`CVE-2026-111636`OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret	Exploitation statusNot exploited	FixYes	Affected productStaffDeck
`CVE-2026-72713`XAgent Path Traversal Arbitrary File Read via /workspace/file	Exploitation statusActively exploited	FixYes	Affected productXAgent	Published08/11/2026
`CVE-2026-58166`OpenBMB ChatDev - Unauthenticated Path Traversal in Upload Handler Allows Arbitrary File Write and Delete	Exploitation statusActively exploited	FixYes	Affected productChatDev	Published
`CVE-2026-4959`OpenBMB XAgent ShareServer WebSocket Endpoint share.py check_user missing authentication	Exploitation statusActively exploited	FixNo	Affected productXAgent	Published
`CVE-2026-4958`OpenBMB XAgent WebSocket Endpoint replayer.py ReplayServer.send_data authorization	Exploitation statusActively exploited	FixNo	Affected productXAgent	Published
`CVE-2026-4957`OpenBMB XAgent API Key function_handler.py FunctionHandler.handle_tool_call log file	Exploitation statusActively exploited	FixNo	Affected productXAgent	Published
`CVE-2026-3954`OpenBMB XAgent workspace.py workspace path traversal	Exploitation statusActively exploited	FixNo	Affected productXAgent	Published03/11/2026
`CVE-2025-6281`OpenBMB XAgent community path traversal	Exploitation statusActively exploited	FixNo	Affected productXAgent	Published06/19/2025
`CVE-2024-2007`OpenBMB XAgent Privileged Mode sandbox	Exploitation statusActively exploited	FixNo	Affected productXAgent	Published02/29/2024

15 Results | Page 1 of 1

Security vulnerabilities from OpenBMB

OpenBMB

Verify to analyze this security profile

How many security vulnerabilities does OpenBMB have?

Which OpenBMB product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular OpenBMB products