What is CVE-2024-2007?

CVE-2024-2007 is a critical vulnerability found in OpenBMB XAgent 1.0.0, specifically affecting its Privileged Mode functionality. This sandbox issue can compromise the confidentiality, integrity, and availability of affected systems. While the exact types of systems impacted are not specified, i

Who is impacted by CVE-2024-2007?

This critical vulnerability can compromise the confidentiality, integrity, and availability of the affected systems. It is important for organizations and individuals using OpenBMB XAgent 1.0.0 to be aware of this issue and take necessary precautions to protect their resources.

What should I do if I’m affected?

If you're affected by the CVE-2024-2007 vulnerability, it's crucial to take action to protect your resources. Unfortunately, no specific mitigation steps or software patches are currently available.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2024-2007 vulnerability in OpenBMB XAgent 1.0.0's Privileged Mode is critical and can compromise system confidentiality, integrity, and availability. Unfortunately, no information is available regarding its presence in CISA's Known Exploited Vulnerabilities Catalog. The vulnerability was published on February 29, 2024, and no specific due date or required action is mentioned. It's advised to replace the affected product with an alternative to ensure system security.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-265, which involves privilege issues in OpenBMB XAgent's Privileged Mode sandbox.

Learn More

For a comprehensive understanding of this vulnerability, refer to the NVD page and the sources listed below.

• VulDB - CVE-2024-2007: OpenBMB XAgent Privileged Mode sandbox (Issue 386)