CVE-2026-72713

Received Received - Intake

Path Traversal in XAgent Workspace File Endpoint

Publication date: 2026-08-11

Last updated on: 2026-08-11

Assigner: VulnCheck

Description

XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the `file_name` form field with no path containment check. Attackers can register an account without email verification, then submit crafted `file_name` values such as parent-directory traversal sequences to the `/workspace/file` handler to read host files including application secrets, database credentials, and system files outside the Docker sandbox.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-11

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2026-72713

EUVD

EUVD-2026-56851

Affected Vendors & Products

Vendor	Product	Version / Range
openbmb	xagent	to 26f2b6e (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

XAgent has a path traversal vulnerability in the workspace file endpoint. Attackers can register an account without email verification and use crafted file names with parent-directory segments to read arbitrary files on the host system. This bypasses the Docker sandbox and allows access to sensitive files like application secrets, database credentials, and system files.

Detection Guidance

Check if the XAgent server is running and accessible. Test the /workspace/file endpoint by sending a request with a crafted file_name parameter containing path traversal sequences like ../../../../../../etc/passwd. If the server returns the contents of the file, the vulnerability is present.

Impact Analysis

This vulnerability allows attackers to read sensitive files on the host system, including secrets, credentials, and configuration files. It can lead to unauthorized access, data breaches, and potential system compromise. Attackers can exploit it without needing email verification or high privileges.

Compliance Impact

This vulnerability can lead to unauthorized access to sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality. It may result in data breaches, unauthorized disclosures, and non-compliance with regulatory standards.

Mitigation Strategies

Upgrade XAgent to a version containing the security fixes (commit 26f2b6edc75127af524f027c022b382967178e3a or later). Disable self-registration without email verification and remove default admin credentials. Restrict file_name parameter to the interaction workspace and implement strict path validation functions like safe_upload_path and safe_workspace_path.

Hi! I’m here to help you understand CVE-2026-72713. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70