CVE-2024-2007

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-2007

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-2007.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-2007

Published

2024-02-29T18:31:04.685Z

Modified

2026-08-12T03:51:25.263309771Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator

Summary

OpenBMB XAgent Privileged Mode sandbox

Details

A vulnerability was found in OpenBMB XAgent 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Privileged Mode. The manipulation leads to sandbox issue. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-255265 was assigned to this vulnerability.

Database specific

{
    "cwe_ids": [
        "CWE-265"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/2xxx/CVE-2024-2007.json"
}

References

Affected packages

Git / github.com/openbmb/xagent

Affected ranges

Type

GIT

Repo

https://github.com/openbmb/xagent

Events

Introduced

5f2773eda42083a4572d77069ed2c95e020aee95

Last affected

5f2773eda42083a4572d77069ed2c95e020aee95

Database specific

Show details

{
    "cpe": "cpe:2.3:a:openbmb:xagent:1.0.0:*:*:*:*:*:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ],
    "extracted_events": [
        {
            "introduced": "1.0.0"
        },
        {
            "last_affected": "1.0.0"
        }
    ]
}

Affected versions

1.*

1.0.0

v1.*

v1.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-2007.json"