CVE-2026-51912
— UNSCOREDpublic exploit availablePublished 2026-10-29 · Updated 2026-10-29
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46).
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.