# CVE-2026-72713: OpenBMB XAgent path traversal in workspace file endpoint

Source: https://junglewise.ai/threats/cve-2026-72713-openbmb-xagent-path-traversal-in-workspace-file-endpoint  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-11. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-72713 · Severity: high · CVSS 7.5 · Published 2026-08-11

XAgent is an autonomous AI agent framework used for solving complex tasks. A path traversal vulnerability in the workspace file endpoint allows attackers who register an account (without email verification) to read arbitrary files from the host system, including sensitive configuration files, database credentials, and application secrets.

Technologies: [OpenBMB XAgent](https://junglewise.ai/threats/technologies/xagent). Vendors: [OpenBMB](https://junglewise.ai/threats/vendors/openbmb).

## Quick answers

**Is CVE-2026-72713 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-72713 being exploited in the wild.

**How severe is CVE-2026-72713?** High severity, with a CVSS score of 7.5, published 11 August 2026.

**Which products and versions are affected?** OpenBMB XAgent <UNKNOWN>.

**Is there a fix for CVE-2026-72713?** A patch was published on 2026-07-31. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-72713 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-72713?** Check whether you run OpenBMB XAgent at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a path traversal flaw in the `/workspace/file` HTTP endpoint that fails to validate or sanitize the `file_name` form parameter. Unauthenticated attackers can self-register an account without email verification, then submit crafted file names containing parent-directory traversal sequences (e.g., `../../../etc/passwd`) to access files outside the intended workspace directory. The lack of path containment validation allows reading arbitrary files on the host, including files outside the Docker sandbox. A fix was published on 2026-07-31 in commit 26f2b6edc75127af524f027c022b382967178e3a.

## Affected products

- OpenBMB XAgent <UNKNOWN>

## Timeline

- 2026-08-11: disclosed
- 2026-07-31: patched

## References

- [https://github.com/OpenBMB/XAgent](https://github.com/OpenBMB/XAgent)
- [https://github.com/OpenBMB/XAgent/commit/26f2b6edc75127af524f027c022b382967178e3a](https://github.com/OpenBMB/XAgent/commit/26f2b6edc75127af524f027c022b382967178e3a)

## Related threats

- [OpenBMB XAgent directory traversal in file upload](https://junglewise.ai/threats/cve-2026-51912-openbmb-xagent-v1-0-0-contains-directory-traversal-vulnerability)
- [OpenBMB XAgent path traversal in workspace router](https://junglewise.ai/threats/cve-2026-26396-openbmb-xagent-path-traversal-in-workspace-router)
- [A vulnerability was found in OpenBMB XAgent 1.0.0. This impacts the function check_user of the file…](https://junglewise.ai/threats/cve-2026-4959-a-vulnerability-was-found-in-openbmb-xagent-1-0-0-this-impacts-the)
- [A vulnerability has been found in OpenBMB XAgent 1.0.0. This affects the function…](https://junglewise.ai/threats/cve-2026-4958-a-vulnerability-has-been-found-in-openbmb-xagent-1-0-0-this)
- [A flaw has been found in OpenBMB XAgent 1.0.0. The impacted element is the function FunctionHandler.handle_tool_call…](https://junglewise.ai/threats/cve-2026-4957-a-flaw-has-been-found-in-openbmb-xagent-1-0-0-the-impacted-element)