This vulnerability in OpenBMB XAgent 1.0.0 allows an attacker to bypass authorization controls by manipulating the interaction_id parameter in the ReplayServer's WebSocket endpoint functions on_connect and send_data. The flaw resides in the component XAgentServer/application/websockets/replayer.py. Exploitation requires remote access and is rated as highly complex and difficult. Although the exploit has been publicly disclosed, there are no known exploits in the wild and the vendor has not issued a fix or advisory.

Successful exploitation results in an authorization bypass, potentially allowing an attacker with limited privileges to perform actions or access data beyond their authorization scope. The impact is considered low severity due to the high complexity of exploitation and limited privileges required. There is no indication of privilege escalation, data integrity loss, or availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch or workaround is available, users should monitor for updates from the vendor. Due to the complexity of exploitation and low severity, immediate emergency response is not indicated but caution is advised.