OpenBMB XAgent version 1.0.0 and earlier contain a path traversal flaw in the file() function used by the XAgentServer. The multipart request parameter “filename” is user‑controllable and is concatenated directly into a file path without validation, allowing an attacker to read arbitrary files on the server and potentially expose confidential data. This flaw falls under CWE-22 and can lead to a compromise of data confidentiality.

The affected product is OpenBMB XAgent. Versions v1.0.0 and earlier are vulnerable. No other vendors or product families are known to be impacted.

The CVSS score of 7.5 classifies the vulnerability as high severity, and the EPSS score of less than 1% indicates a very low but non‑zero exploitation probability; the KEV catalog does not list it. Attackers can trigger the flaw remotely by sending a crafted filename value to the file retrieval endpoint, and because the input is not authenticated or sanitized a single request can read arbitrary files located above the intended directory. The risk is primarily a breach of data confidentiality, with limited impact on integrity or availability.