CVE-2026-4959 OpenBMB XAgent ShareServer WebSocket Endpoint share.py check_user missing authentication
Attackers can bypass authentication on the XAgent ShareServer WebSocket endpoint by manipulating the interaction_id argument.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-4959?
CVE-2026-4959 is a medium-severity missing authorization vulnerability in OpenBMB XAgent, published on 27 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was found in OpenBMB XAgent 1.0.0. This impacts the function check_user of the file XAgentServer/application/websockets/share.py of the component ShareServer WebSocket Endpoint. Performing a manipulation of the argument interaction_id results in missing authentication. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Which versions are affected by CVE-2026-4959?
It affects 1 product.
Products include Openbmb Xagent.
How do I fix CVE-2026-4959?
No fix has been published for CVE-2026-4959 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-4959 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-4959 exists.
Other vulnerabilities in OpenBMB XAgent
- CVE-2024-2007 OpenBMB XAgent Privileged Mode sandbox
- CVE-2026-4957 OpenBMB XAgent API Key function_handler.py FunctionHandler.handle_tool_call log file
- CVE-2025-6281 OpenBMB XAgent community path traversal
- CVE-2026-4958 OpenBMB XAgent WebSocket Endpoint replayer.py ReplayServer.send_data authorization
Sources
Also known as GHSA-7355-47hq-rrv2.