CVE-2026-85667

CVSS 9.3 (critical) · published 2026-09-04

xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attackers to inject arbitrary messages into the agent pipeline. Attackers can publish malicious messages via the /webhook_worktool handler and exploit unvalidated media URL fetching to perform server-side request forgery against internal services.

Weakness: CWE-306

Source: NVD CVE-2026-85667

References

• https://github.com/TeamWiseFlow/xiaobei
• https://github.com/TeamWiseFlow/xiaobei/blob/v5.5.2/awada/awada-server/src/routes/webhook-worktool.ts
• https://github.com/TeamWiseFlow/xiaobei/issues/440
• https://www.vulncheck.com/advisories/xiaobei-through-5.5.2-unauthenticated-webhook-message-injection
• https://github.com/TeamWiseFlow/xiaobei/issues/440

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.