CVE-2026-85667

Xiaobei through version 5.5.2 performs no authentication and no signature validation on its webhook endpoints (CWE-306), so any client that can reach the service can call them without credentials. An unauthenticated attacker can send requests to the /webhook_worktool handler to publish arbitrary messages into the agent pipeline, allowing message spoofing and manipulation of automated messaging. The same unauthenticated surface also lets the attacker supply media URLs that the server fetches without validation, enabling server-side request forgery against internal services reachable from the deployment. Operators running xiaobei 5.5.2 or earlier whose webhook endpoints are reachable from untrusted networks are affected. No public proof-of-concept, KEV listing, or exploitation activity is currently known, and EPSS estimates only about a 0.4% probability of exploitation within 30 days.

What to do: Upgrade to a xiaobei release newer than 5.5.2 as soon as a patched version is published, since the advisory data does not identify a fixed release. In the meantime, restrict access to the webhook endpoints (including /webhook_worktool) to trusted source addresses at a firewall or reverse proxy and, where possible, enforce a shared-secret or signature check in front of the handlers. Also limit the server's outbound media-URL fetches to an allowlist to blunt the SSRF vector against internal services.