CVE-2025-6281 | OpenBMB XAgent up to 1.0.0 /conv/community path traversal (Issue 415)

A vulnerability has been found in OpenBMB XAgent up to 1.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /conv/community. The manipulation leads to path traversal.

This vulnerability is known as CVE-2025-6281. The attack needs to be approached within the local network. Furthermore, there is an exploit available.