CVE-2024-2007

Published: Mar 21, 2024Modified: Jun 2, 2025

8.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: NVD

Description

A vulnerability was found in OpenBMB XAgent 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Privileged Mode. The manipulation leads to sandbox issue. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-255265 was assigned to this vulnerability.

Affected (1)

Products: Openbmb: Xagent

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Openbmb Xagent	Version 1.0.0

Related CWEs

References (6)

https://github.com/OpenBMB/XAgent/issues/386

Source: cna@vuldb.com

Issue TrackingThird Party Advisory

https://vuldb.com/?ctiid.255265

Source: cna@vuldb.com

Permissions RequiredVDB Entry

https://vuldb.com/?id.255265

Source: cna@vuldb.com

Third Party AdvisoryVDB Entry

https://github.com/OpenBMB/XAgent/issues/386

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://vuldb.com/?ctiid.255265

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredVDB Entry

https://vuldb.com/?id.255265

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.