{"id":"CVE-2026-108739","published":"2026-10-11T13:17:18.383","lastModified":"2026-10-16T19:18:44.867","description":"OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated attackers to list all workspaces via GET /v1/workspaces. Attackers can read the unmasked browserfabric_api_key in each workspace's settings map, along with workspace ids, slugs, creator emails and member lists.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://github.com/openagents-org/openagents","tags":[]},{"url":"https://github.com/openagents-org/openagents/blob/0824907096d4039d86dfc96b81f9eebf31a77ae7/workspace/backend/app/routers/workspaces.py#L135-L177","tags":[]},{"url":"https://github.com/openagents-org/openagents/blob/0824907096d4039d86dfc96b81f9eebf31a77ae7/workspace/backend/app/routers/workspaces.py#L326-L349","tags":[]},{"url":"https://hackmd.io/@haind/openagents-workspace-list-browserfabric-key-disclosure","tags":[]},{"url":"https://www.vulncheck.com/advisories/openagents-workspace-through-launcher-1.0.17-unauthenticated-credential-exposure-via-v1-workspaces","tags":[]}],"exploitRefs":[{"url":"https://github.com/openagents-org/openagents","tags":[]},{"url":"https://github.com/openagents-org/openagents/blob/0824907096d4039d86dfc96b81f9eebf31a77ae7/workspace/backend/app/routers/workspaces.py#L135-L177","tags":[]},{"url":"https://github.com/openagents-org/openagents/blob/0824907096d4039d86dfc96b81f9eebf31a77ae7/workspace/backend/app/routers/workspaces.py#L326-L349","tags":[]}],"hasPoc":true,"ai":{"summary":"The OpenAgents Workspace backend has an information disclosure vulnerability that allows unauthenticated attackers to list all workspaces and access sensitive API keys and user information. This flaw enables attackers to obtain browserfabric_api_key values without authentication, potentially leading to unauthorized access to workspace resources.","exploitability":"Exploitation is straightforward requiring only a GET request to /v1/workspaces endpoint with no authentication prerequisites.","blast_radius":"The vulnerability could impact all workspaces in the system, exposing API keys that may grant access to additional services and potentially allowing attackers to pivot into other workspace resources or user accounts.","remediation":"Apply the patch for launcher-v1.0.17 which contains the fix for this information disclosure vulnerability.","detection":"Monitor for unauthenticated GET requests to /v1/workspaces endpoint in web server logs, specifically looking for requests without authentication headers that return JSON responses containing workspace details and API keys.","tags":["information-disclosure","api","web","authentication"],"model":"garnet-coder","analyzedAt":"2026-10-18T16:03:46.811Z"}}