Unknown · Xlang-Ai Openagents · CVE-2025-6282
**Name of the Vulnerable Software and Affected Versions**
xlang-ai OpenAgents versions up to ff2e46440699af1324eb25655b622c4a131265bb
**Description**
A critical issue was found in the `create upload file` function of the `backend/api/file.py` file, leading to path traversal. The exploit has been disclosed to the public and may be used. The product uses continuous delivery with rolling releases, and therefore, no version details of affected or updated releases are available.
**Recommendations**
As a temporary workaround, consider disabling the `create upload file` function until a fix is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.