CVE-2024-2007

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Mar 21, 2024
Updated: May 17, 2024
CWE ID 119

Summary

CVE-2024-2007 is a critical vulnerability affecting OpenBMB XAgent 1.0.0. An unknown functionality in the Privileged Mode component has been identified as the source of this issue. Successful exploitation results in a sandbox problem, which can be triggered locally. The exploit for this vulnerability has been made public, increasing the risk of attacks. The VDB-255265 identifier has been assigned to this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share