Vulnerabilidades de Openagents-org
CVEs publicadas que afetam produtos de Openagents-org: 1 registro(s), com severidade, exploração e correções.
CVE-2026-108739
Alta · 7.5
CWE-306 11/10/2026
OpenAgents Workspace through launcher-v1.0.17 Unauthenticated Credential Exposure via /v1/workspaces
OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated attackers to list all workspaces via GET /v1/workspaces. Attackers can read the unmasked browserfabric_api_key in each workspace's settings map, along with workspace ids, slugs, creator emails and member lists.