CVE-2026-58166: OpenBMB ChatDev unauthenticated path traversal file upload
CVE-2026-58166 is verified against OpenBMB/ChatDev · github affected versions: ChatDev <= 2.2.0 (v2.2.0 is latest release dated Mar 23, 2026) vulnerability class: RCE This critical reproduction includes runnable sandbox proof, artifacts, and a plain-text agent view under REPRO-2026-00238.
pruva-verify REPRO-2026-00238 curl -O https://pruva.dev/api/v1/reproductions/REPRO-2026-00238/artifacts/bundle/repro/reproduction_steps.sh && chmod +x reproduction_steps.sh && ./reproduction_steps.sh OpenBMB ChatDev through 2.2.0 contains a path traversal vulnerability allowing unauthenticated attackers to upload files outside the intended directory, which can lead to remote code execution. Reproduce: run ChatDev <=2.2.0, send an unauthenticated upload request with directory traversal sequences in the filename, and verify that the file is written outside the upload directory.
Variant analysis
The agent's step-by-step process — every tool call, every handoff, the moment the exploit fired. Phases: support triages the advisory · repro reproduces it · vuln_variant confirms the fix blocks it · judge verifies.
Loading session...
Scripts, logs, diffs, and output captured during the reproduction.