OpenBMB XAgent 1.0.0 contains a flaw in the workspace function of workspace.py. The function blindly processes the file_name argument, allowing an attacker to craft a path that traverses outside the intended workspace directory. This leads to directory traversal, which can expose sensitive files or system configuration data. The weakness is classified as CWE-22, a common path traversal vulnerability.

The affected product is OpenBMB XAgent, specifically version 1.0.0. No extended version matrix was provided by the CNA. Users running this version or newer unpatched variants are at risk.

The CVSS score of 6.9 indicates a high impact severity. The EPSS score is below 1%, showing low current exploit probability, and the vulnerability is not listed in the CISA KEV catalog. However, the vulnerability is publicly available and can be remotely triggered by manipulating the file_name argument, making it potentially exploitable by adversaries with network access to the service. The overall risk is moderate to high, particularly for environments exposed to the internet without hardened input validation.