CVE-2026-85667: xiaobei through 5.5.2 Unauthenticated Webhook Message Injection
xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attackers to inject arbitrary messages into the agent pipeline. Attackers can publish malicious messages via the /webhookworktool handler and exploit unvalidated media URL fetching to perform server-side request forgery against internal services.
Affected Software
Event History
Frequently Asked Questions
Which endpoint is exposed to unauthenticated message injection?
The affected handler is /webhook_worktool. It accepts attacker-supplied messages without authentication or signature validation and passes them into the agent pipeline.
What access does an attacker need to exploit this issue?
The issue is remotely exploitable with no privileges or user interaction required. An attacker needs network access to the affected webhook endpoint.
What is the impact beyond injecting messages?
An attacker can abuse unvalidated media URL fetching to make the server request internal services, creating an SSRF condition. The stated impact includes high confidentiality and integrity impact.