CVE-2026-85667 Details
Description
xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attackers to inject arbitrary messages into the agent pipeline. Attackers can publish malicious messages via the /webhook_worktool handler and exploit unvalidated media URL fetching to perform server-side request forgery against internal services.
A vulnerability exists in Xiaobei versions through 5.5.2, where webhook endpoints lack authentication and signature validation. This flaw allows unauthenticated attackers to inject arbitrary messages into the agent pipeline. The injection occurs via the '/webhook_worktool' handler, which, by default, uses the first configured bot if no 'robotId' is provided. Additionally, the vulnerability exploits unvalidated media URL fetching, enabling server-side request forgery (SSRF) against internal services.
To address this vulnerability, it is recommended to implement authentication or signature verification on the webhook endpoints, ensuring that only authorized requests are processed. Additionally, validate media URLs before fetching them to prevent SSRF attacks.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 4, 2026CISA-ADP
Assessed Sep 8, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/TeamWiseFlow/xiaobei/issues/440 | CISA-ADP | ExploitIssue TrackingTechnical AnalysisVendor |
| https://github.com/TeamWiseFlow/xiaobei | [email protected] | ProductSource CodeVendor |
| https://github.com/TeamWiseFlow/xiaobei/blob/v5.5.2/awada/awada-server/src/routes/webhook-worktool.ts | [email protected] | Source CodeVendor |
| https://github.com/TeamWiseFlow/xiaobei/issues/440 | [email protected] | ExploitIssue TrackingTechnical AnalysisVendor |
| https://www.vulncheck.com/advisories/xiaobei-through-5.5.2-unauthenticated-webhook-message-injection | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| TeamWiseFlow xiaobei | <= 5.5.2 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 8, 2026 | CVE Modified | CISA-ADP |
| Sep 4, 2026 | New CVE Received | [email protected] |