OpenAgents Workspace: Missing authentication exposes workspace data and API keys
Summary
The OpenAgents Workspace backend through launcher-v1.0.17 does not require authentication for GET /v1/workspaces. An unauthenticated attacker can list all workspaces and read unmasked browserfabric_api_key values, workspace IDs, slugs, creator email addresses and member lists. The sources do not state whether vendor-hosted or self-hosted instances are affected.
Affected
- OpenAgents Workspace backend through launcher-v1.0.17 (openagents-org/openagents)
- Unknown: whether the vendor-hosted service or self-hosted instances are affected
Fixed in
Unknown.
- The launcher-v1.1.8 release notes mention a fix titled "close unauthenticated workspace settings disclosure" (PR #877), but no vendor advisory confirms that it fixes this CVE.
Workaround
- Restrict network access to the backend so that only trusted hosts can reach it. Do not expose it to the internet.
- Rotate any browserfabric_api_key values that may have been visible on an affected instance.
- Review workspace creator and member lists for unknown accounts.
Exploitation
- CISA SSVC: exploitation none, automatable yes.
- Not listed in CISA KEV.
- No public proof of concept or confirmed in-the-wild exploitation found at the time of research.
- Exploitation requires no authentication and no user interaction (CVSS 4.0 AV:N/AC:L/AT:N/PR:N/UI:N).
Our recommendation
- Check whether any OpenAgents Workspace backend in your environment is at or below launcher-v1.0.17.
- Restrict access to such backends now and do not expose them to the internet.
- Rotate browserfabric_api_key values and review workspace member lists.
- Ask the vendor for the exact fixed version before assuming that v1.1.8 or later is safe.
- Monitor access logs for unauthenticated requests to /v1/workspaces.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- VulnCheck advisory www.vulncheck.com
- OpenAgents GitHub repository github.com
- Affected code: workspaces.py (lines 135-177) github.com
- Affected code: workspaces.py (lines 326-349) github.com
- Third-party write-up (hackmd) hackmd.io
- OSV record CVE-2026-108739 osv.dev
- Launcher v1.1.8 release github.com
- OpenCVE record CVE-2026-108739 app.opencve.io
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 05:03.
Original description (NVD)
OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated attackers to list all workspaces via GET /v1/workspaces. Attackers can read the unmasked browserfabric_api_key in each workspace's settings map, along with workspace ids, slugs, creator emails and member lists.
NVD references (5)
- https://github.com/openagents-org/openagents
- https://github.com/openagents-org/openagents/blob/0824907096d4039d86dfc96b81f9eebf31a77ae7/workspace/backend/…
- https://github.com/openagents-org/openagents/blob/0824907096d4039d86dfc96b81f9eebf31a77ae7/workspace/backend/…
- https://hackmd.io/@haind/openagents-workspace-list-browserfabric-key-disclosure
- https://www.vulncheck.com/advisories/openagents-workspace-through-launcher-1.0.17-unauthenticated-credential-…
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.