OpenAgents vulnerabilities
CVEs whose affected-version data names the OpenAgents package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-108739High· 7.5OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated attackers to list all workspaces via GET /v1/workspaces
OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated attackers to list all workspaces via GET /v1/workspaces. Attackers can read the unmasked browserfabric_api…
▾ Twilightopenagents-org · OpenAgentsEPSS 0.32%via NVD
CVE-2026-86237Medium· 5.3PoCA vulnerability was found in openagents-org openagents up to 0.8.19/0.9.3.post20
A vulnerability was found in openagents-org openagents up to 0.8.19/0.9.3.post20. Impacted is the function test_default_model of the file sdk/src/openagents/sdk/transports/http.py. Performing a manipulation of the argument base_url resul…
▾ Twilightopenagents-org · openagentsEPSS 0.54%via NVD