| Title | xlang-ai OpenAgents commit ff2e464 Path Traversal |
|---|
| Description | OpenAgents does not strictly check the parameters when processing the `/app/upload ` route, resulting in path traversal when saving files. |
|---|
| Source | ⚠️ https://github.com/xlang-ai/OpenAgents/issues/141 |
|---|
| User | Anonymous User |
|---|
| Submission | 06/10/2025 04:12 (10 months ago) |
|---|
| Moderation | 06/19/2025 09:03 (9 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 313286 [xlang-ai OpenAgents up to ff2e46440699af1324eb25655b622c4a131265bb backend/api/file.py create_upload_file path traversal] |
|---|
| Points | 15 |
|---|