CVE-2026-51912 | OpenBMB XAgent 1.0.0 Upload main.py path traversal

October 29, 2026 Yanac

A vulnerability was found in OpenBMB XAgent 1.0.0 and classified as problematic. This impacts an unknown function of the file ToolServer/ToolServerNode/main.py of the component Upload. The manipulation results in path traversal.

This vulnerability is reported as CVE-2026-51912. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More