What is GHSA-c52p-2jm8-wv9q?

GHSA-c52p-2jm8-wv9q is a security advisory published by GitHub Security Advisories with High severity. OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file() function in XAgent...

Which CVE IDs does GHSA-c52p-2jm8-wv9q cover?

GHSA-c52p-2jm8-wv9q covers the following CVE IDs: CVE-2026-26396. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c52p-2jm8-wv9q?

GHSA-c52p-2jm8-wv9q has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-c52p-2jm8-wv9qHighCVSS 7.5

OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file() function in XAgent...

Vendor

GitHub Security Advisories

Published

July 13, 2026

Last Modified

July 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-26396 →

📋 Description

OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file() function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” is user-controllable and is concatenated into the file path to be read without proper validation, leading to a directory traversal vulnerability that may result in sensitive information disclosure.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-26396
https://gist.github.com/jack2223333/f79f233b67d6506b9dd184399525cbf4
https://github.com/advisories/GHSA-c52p-2jm8-wv9q