CVEvulnerability
CVE-2024-2007
8.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-03-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:L/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-265
Description
A vulnerability was found in OpenBMB XAgent 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Privileged Mode. The manipulation leads to sandbox issue. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-255265 was assigned to this vulnerability.
Affected configurations
• openbmb xagent 1.0.0
Related
Weakness · not in database (1)
References
- https://github.com/OpenBMB/XAgent/issues/386 Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.255265 Permissions Required, VDB Entry
- https://vuldb.com/?id.255265 Third Party Advisory, VDB Entry
- https://github.com/OpenBMB/XAgent/issues/386 Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.255265 Permissions Required, VDB Entry
- https://vuldb.com/?id.255265 Third Party Advisory, VDB Entry