In XLANG OpenAgents through fe73ac4, the allowed_file protection mechanism can be bypassed by using an incorrect file extension for the nature of the file content.
CWE-288 Authentication Bypass Using an Alternate Path or Channel