The vulnerability exists in OpenBMB XAgent 1.0.0 within the FunctionHandler.handle_tool_call routine. By manipulating the api_key argument, an attacker can cause the application to write sensitive data into log files. This exposes credentials or other confidential information to any party that can read the logs, fulfilling the conditions of CWE‑200 (Information Exposure). The flaw does not allow arbitrary code execution but can be leveraged to gather secrets needed for subsequent attacks.

This issue affects the OpenBMB XAgent product, specifically version 1.0.0. If other unlisted versions include the same FunctionHandler implementation, they may also be vulnerable, but the only confirmed impacted version is 1.0.0.

With a CVSS score of 5.1, the vulnerability is classified as moderate. The attack vector is remote, and the exploit is publicly available, although an EPSS score is not provided. The vulnerability is not listed as a known exploited vulnerability in CISA's KEV catalog. Given the explanatory description, an attacker can remotely trigger the faulty logging by sending crafted input that manipulates the api_key. Those who can read the log files can obtain exposed information, directly impacting confidentiality.